f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80}}], 0x58}, 0x0) 03:45:21 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407600000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:21 executing program 5: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) 03:45:21 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x58}, 0x0) [ 3078.132022][T20099] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0}}], 0x58}, 0x0) [ 3078.256800][T20109] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3078.455514][T20099] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) getsockopt$sock_timeval(r2, 0xffff, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e0084e) 03:45:21 executing program 5: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x44) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 03:45:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x58}, 0x0) 03:45:21 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000}}], 0x58}, 0x0) [ 3078.522751][T20109] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:21 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x58}, 0x0) 03:45:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000}}], 0x58}, 0x0) 03:45:22 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x20000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:22 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x58}, 0x0) 03:45:22 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407700000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x58}, 0x0) [ 3078.825579][T20142] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:22 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}], 0x58}, 0x0) [ 3079.039510][T20154] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3079.064540][ C0] net_ratelimit: 26 callbacks suppressed [ 3079.064549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3079.076680][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3079.083368][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}], 0x58}, 0x0) [ 3079.089506][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3079.161277][T20142] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3079.529403][T20154] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.threads\x00', 0x2, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x0) 03:45:23 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x58}, 0x0) 03:45:23 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100}}], 0x58}, 0x0) 03:45:23 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x3f000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:23 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407800000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0x2ffff}) [ 3079.898754][T20187] rds_sendmsg: 7 callbacks suppressed [ 3079.898811][T20187] atomic_op 00000000cb61a55d conn xmit_atomic 0000000016d46f7e [ 3079.944155][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3079.950054][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:23 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) [ 3080.025042][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3080.031361][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x2c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x0, 0x0) close(0xffffffffffffffff) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) socket$inet6(0xa, 0x0, 0x81) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 03:45:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x400000000) r2 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r4 = dup2(r3, r2) flock(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x8, 0x10001, 'queue0\x00', 0x4}) r5 = getpgrp(0x0) r6 = getpgid(r5) sched_setscheduler(r6, 0x2, &(0x7f0000000100)=0x7) ioctl$TIOCEXCL(r0, 0x540c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x7fffffff, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r7, 0x1, 0x29, &(0x7f0000000340)=0x9, 0x4) ioctl$TIOCEXCL(r4, 0x540c) fstatfs(r1, &(0x7f0000005200)=""/4096) 03:45:23 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x58}, 0x0) 03:45:23 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x58}, 0x0) [ 3080.344170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3080.350000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3080.353358][T20205] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3080.409106][T20208] atomic_op 0000000099311bd1 conn xmit_atomic 0000000016d46f7e 03:45:23 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x40000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:23 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407900000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:23 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x58}, 0x0) 03:45:23 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8fd3f0000000000}}], 0x58}, 0x0) [ 3080.644455][T20223] __nla_validate_parse: 13 callbacks suppressed [ 3080.644465][T20223] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3080.767127][T20236] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x4500, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000003c0)="660f1a2a0f22c42e0f35b86a2e06d40f23d80f21f835400000c00f23f8c4c161f57b04f6c8560f070f0131b9800000c00f3235000800000f30ba00800000", 0x3e}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) geteuid() 03:45:24 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x58}, 0x0) [ 3080.998482][T20245] atomic_op 0000000073da3198 conn xmit_atomic 0000000016d46f7e 03:45:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x54}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) [ 3081.171456][T20223] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3081.235574][T20236] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:24 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000}}], 0x58}, 0x0) 03:45:24 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}], 0x58}, 0x0) 03:45:24 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) fsetxattr$security_ima(0xffffffffffffff9c, &(0x7f0000000000)='security.ima\x00', 0x0, 0xffffff1a, 0xfffffffffffffffe) [ 3081.459065][T20265] atomic_op 000000005ce2ead2 conn xmit_atomic 0000000016d46f7e 03:45:24 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x48000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:24 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x29d, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) write(r1, &(0x7f0000000280)="a2", 0x1) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1}}, 0x48000) close(r1) 03:45:24 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x58}, 0x0) [ 3081.637344][T20277] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3081.688037][T20279] atomic_op 00000000cb906065 conn xmit_atomic 0000000016d46f7e 03:45:25 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407a00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000}}], 0x58}, 0x0) 03:45:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x2, [@loopback, @broadcast]}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000231000)={@multicast2, @loopback, @broadcast}, 0xc) 03:45:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0x58}, 0x0) 03:45:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}}], 0x58}, 0x0) [ 3081.904474][T20294] atomic_op 000000003aa85e6b conn xmit_atomic 0000000016d46f7e 03:45:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) dup3(r0, r1, 0x0) socket$inet6(0xa, 0x19e12197864763bf, 0x0) [ 3081.955175][T20299] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}], 0x58}, 0x0) [ 3082.052057][T20277] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x58}, 0x0) [ 3082.158162][T20311] atomic_op 00000000abe3df90 conn xmit_atomic 0000000016d46f7e 03:45:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x58}, 0x0) 03:45:25 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x4c000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3082.372921][T20299] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3082.411827][T20323] atomic_op 0000000003d6d598 conn xmit_atomic 0000000016d46f7e [ 3082.444761][T20326] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3082.542706][T20326] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)) 03:45:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x58}, 0x0) 03:45:26 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407b00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:26 executing program 2: r0 = add_key(&(0x7f0000000280)='trusted\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000004c0)="2bb9f813f65c4a7edd38952b06aee015b0d56e6fdf6fb9feeab730c20618a310127d2cd0991011300773432314037d23f2209bc522943121976f68e1190ea0b6741d2d36186afc7e89534e96ec4ce5cac62128c76e57f94f9b81d125ef58d170527e361686d0453341d1ac040d0b1b4587517528ec182e5efc7fd2d82b178a5d9c0ce5909d77e257bb1ccd07f4a9c3a48e56792c49040841e606d1567ecda8ef57b3178ca3f935465f657b4ae730b99959552bee417fa92340ffae5a7380d5b3c47a52fd61ee48e7b46d2f6a0685d10860ef6c356bf1a9892cad0aac37d536d8598b03ac221a2d357ccbfcfaaf69220cb5dcd00e88721558b45960a2af1b609942e559b59ab8f567367b957ec864c60a79a4bb18fe5568f7d0ab7ff52e5ec79e72d8ec54af0cb5d428fe06e4ea51718604870fc1d884b6ba8ce36e752738d6db6f0ebadb65c4fb2a5ccb1ba25e24afe117295f08884e063ba5d718ff2dda7d13d244da164ac7c1a59a6ab2c93ae85b93ad69b98945593c1b2df01e9481b745fd63197a0aba19e6de125eb67558dd22b29b10e101b4846f3edf8765908998a94f985887138e27fd9592ac1bcb28f456c500594e40f41c0726253e4fcdc4f8b4b4b2ad8c45afaacaa8f59c5aa1870a4fd82176f63a3fcdd1499c179e9d5053022ed3abf2acef87d1789240074cc73640636855c180c7d937b548654d1379b659807b9b0c941bbcd3f79a9c68b66e792fd36451f430a9ff1c68e83558b9ec1009884b453f9c386c1bb6a6403b8ea086da58ea8a9b504bedddba6e176495fc405c17ea1bc062e54dd96943eb1ed66f88d84b102e72ee4258a3199b4b62dd973be5da9a103d5565d3cce3733b031fae0ef02ee840b3ba8603c5ab5dcb2cb9e1ddf96d11da3952995689438e71133398fedb381dffde9c9eeb3a7d4d7b3fcf83f89497d0c947f96bb103f9922e1d52dc6e627070c020f66a8777991664d20a23fa65a9443670d5103a5048f7d1425dd8df3d3b0628d5785edd09c628c77485b91168ebe5060694b121248c666a1e924714f891844cd83bb1f7c8b77f6397861a7026981680e16579fc20961ac4af35433250b2d6a7894d14c4e013f748f6dc36432df34db64e561ef1e6d1d517a05f3fbd186978b77aaa8de2f64864b0ed7263d65e33e4ed36bd6b792359866a1214ff1f4c11f4ba2a49d5faa58ec3a38dcef1cf211b3069e30da637c0d99531c92a415e465f7f55283babcdca9d8ff330327d75ac6206d59462c63cd8eeaa63af170a5364fdf5209b12d750101627fde63a6b6fda4b47d8db43609a169749691e9ef332daabc02fd1d04771eca8d1ab2e4b2d5a8234b44bd76abd2b2d1103c92d0cf37e8e1312fdbfb52f4c557d391566c4141edda15481328f9244bc1c25de3dcd63dcc403fcc608bb1921600413ccfaa72bf06390ea0c5f6663af8d5b649a2ebf7b713626f265c0d682812345d56a91732df8e7035f63ec38f7de6dd6af51ea7de6861c4f6a44f18d23ef3b83e873b5f0b241eceb156a6469315f5a88896cfdb5a9a43ac788a66dfe97a22e6bbfd47e8ccb58a0c7ac004f4506a8f2402a2c5afc4820a3866c24998c0cc39fa80eedeab63b4ae791a4bef261a7c78370ddca81d0b857ce97eda225df50a3f746060ff8ac58666a4e18b683815fb0ba540145d355c344baea79bac71d9c04b3b1e2ac46b5dad90d74bbfd8536a313555fe3d4cadc591d886b7568055e6e83d78bdc30820eeaecec9fed4c4f590cb990e4ee4d49fec2f056fba1331dd17bcdc10a9765aec0c6f77394cc43c0736c1c1bf232311ed7168e61d4510a02caeedb48a3bf36a551bae11b7a5d623bd110d2c91a1617c76a536b33ed2b35dc4a1601a5969e24d7a38f4f71015671d9a2af487ca1ed0705fc05aad27138eda61560fa16d9ec20f31826cf3d50476a0be7fbb739492f6e09c2be1b0b776e364d6309e6bbea89210890407614f03dbb7ab87ef39474c0ae4d297353b460491e6980439d0fe721cb3de5a7178bb2842460915974fd7db11923f7cba4785e0942ff587c053e7ef78f14c525e55fea545dc76e545cdd49e2acd7871421388ccae43930046db1e45214064852067f8f4009cbcb9a477281ee8c488d614ee9e1bf895e26aa1cd0b7e1d588b56d9d3b9dd47c777e6b91640b73b503a2f3a0a334c39e1407e558c5ec9d607c4b3199c3161f2875c0f61ced4b6ded4398d048f42e771d186b1d665003307cdbdc88310d886f5ec56f8ed31dca74dbf13a8053526ec85e2cf2c4104c8f6ee8af31ed693bbc7d97540ac4ee567b741ae06e895cf62fb608408e681efd0eb3c1e236baa61f6ada5b6f454277bd6b3c739eef165cc57f352e499da7ba767de7769fff6b603fc9caad879bdf9e2698541f80e689e1df1459f222f83387dfbc522fa5ee506b6c255f588705006f4569aa528c5ce6c86bcc0feee9d332f405ec37cd6312d2fcb3dc4bbc46e0f887de8eafd4e4bf9f209d6d3166e91c6f918e7990e738a0f4cc9c0298430bbdd76470d2fdb52a4bf92788b5579c9913821f4347b8b96bdd7b00155f3249d4b71b3bb8a9c1683dd569b904387f2586e444cda7ca7cf0fc2d85bce7e27ac7772424ae4b3f50797b9eccde2cafbb8c30413c50ddb42f229cb732f3e71fb288d2990fdf037fc18cbfc5bf4f3d8cc7806242e50c9216b2196c9a50a5d75391f2d95160323913267b2b35a2ee944aa0b7a68646e80d5b8f13172e3e885e1bf00ed1f9e6245c6484ed72a5aa3ed177b771c3e896f57812b94737a6b6c632267e65da1db06cd00f2b5bf2640a5be2db5cacbc91ecbc59ce8ab3e3ccd2fbb8a8878aa668c7c669c69b84f6d766875cfcfbb43c897e076fff5aecb98cd72bd3219192f742906d0f3f92b4df04456c2ba645979c87c316e36861117b4f305812dc121f0aee70606925f38f4180ffb48ddf436b7ad925cc1f0bbdc8b08fdbe84844414bf1212cb74f9656c57e5d7c6e9ea76bd9ee2141f4662d14d82ee83b087c012b320b9cd2a05c506a33c48f58d528abbdc690b8f1d5cca1e03dd8f05e82655db43d40585ed358ff03f5b13ce245d34f71aa5df7b7b03669900157b466af7603a96626345963b28236804e978291f7277a1c01950932b4ca4c331f600ee6fb4e0f0c7c87d6ec71ec2d99b5c103acf6e92ebef3433cad7a84d10d91ac0a29c6bd36cbf2fe09a927954229a2f928977aedd6d0274e233e44513c3b846237a55127aa824f1b28a5a0c31edad3436eb63f2c14b48a2aca702a616f38a22f6fb1928afecc9d9df7087f8ebbed6e61179b2422cbfcf33ce3754ca0f257a2147cb291d89b894c7260045bcfdfa28750af78567aab2b6761b3ba30e07e8f65722a197136ea7697c586b2c663e23f242810c4bdd49dc5468dbc15e7140ad611408f6d345bf5927eabf3aa7e8d091d1342a963bbe4833b228525069dd5f0ff2336f9c9274e16e8ce82a503f086e30ba02492935e328fd9a763853618e2a5d338808b6ab0a9af4db611750cb275570bf9deaf4c72c2ce714f6294680223059a330666da0088dc0810537575c1a0fffc43349b9e746675dc5239e61704b6a95a57e18287b36afca7ca0e727fa2c83faee02fa0081c08996d6be511a0b8590b56818909a0dcbd91eed23a979b8056bd619cac8b528cee37ba5e895950d70a419eba405cd044acac7165ba034c3ce824e92e089bd9af8c8cd713cb79d004b5bb982e5e7b829ae70ca36df8cec3f9c3945d93aade55bfb6ce87fe5adb691b28755d8e548023a0cff3a7b4b6ed253bdba44c5710f51d4c78c76f6ba37813b53c56b9acef2bf2a8fc30745d4e3c749cf39a6e5d9fa598719327040910760c30045f12f4dc2d0f948a659a757904e287831669629155b4156e704005a7e641ad92b330fc586114aa27000fc9ae35ec680519b6d7164b3929713239ffc804acde51a257b0a9e312a11dcd9c11ab9d99993b37f7f2d97279ae2e87fe3dd3402649effc5e0fef159b562c1415f442d1828ce6f2c1178436008a0b7c84310ee8111f51634e0ea7d65110c2ba29b9673281e61a33e398e2d8d6be1a7dd4c088f8479d7823a84b65adec01590edcf33b711a9422908fdb9d15baafae9c97ce3768f92568fb378d035c71dfbd836b24f5635bf7d616e3bfa6f0a5456ccce6e4972c3ac52e324661d4c386f5e80114e2cca8d4e294dede095c67816d532797d611086d551a8300e087b817cf5c0abec98fc23d701343833a05a0eae33150ac28328febf7925a27aaf2fe8a100b01efebf95264cfb7b0c672a6bb1cf92d632394efb4d2c159053cedd1e07388405901bba5cbf433c25d427b433c424431f774ff97e2b67c3e0e70787e4322235e7b3d0fb2e0f39ca1fbf63dbe3b885e259d637788abd4a6918026c77d5f368866138cd8a783a9b21f4ea783a9464ab8859f0c63a07e373790748bc51a6a8c40bbc247e233079b10dc2703d7eb6dcaf59ac67ac105db29749f791119e53ef178409d6ed265d3e94fe2ca98e41856e85f1678e1f47d463b653874d0241b773451f1dd31a0e8e36822ea17604efdad721282bf15e05b9dac899e2d0d3d85df02697af7958fa4d40230e97816abbfdc77cd9ee30919a5f8dd66e570d2d8bb2941bad7d804621557cac79bdfb1389f0f4b02d77b6c93640c07a025715cb59d98641929a2c171d16450c65bc762dc93695106af45631132b1fbf992d5511ea853d1cdaacc6dee03796a3993a87101ce325990949e80e5f5f48e854fd1f74e9ed3e6af5e346711ac7513dabf48583d13b788a8baa01354dc5362fa5476fe5066bbe8688521b1b8003a18736f876765379418bac8b9ff1b235a518a0c3b36f2ed86c3f60aafbbbc938767106660909650e5c8fdf4c5ce7cba76f23ab331d83fba6a66ab1940314927fe2d55981c0cb3fcf2354fcfc59eb9992f81e1459262c6fceaaecb215eb350517632cf1a2d08aa523f8eb10511c5cdf89ef96b2b2106190730bc35500907fe7c00f0b37dc92f79c9616ead86bdbd9b8f4f1cf8fae24085fb25043304ec5d393b38ee9c7f037ab91d1e05b741c178d27a3eb96b495ba8e994aa39ad116e0ff2d370210f3d161057be9337021d56f59f7eef70fd93ba52630058426591838a7a375ac3453516439d0abbcc141381c956c67e366cdffb35291d863fc901bb5cb820d186255796f1428da9001960f920489bb6b65681e0ffe5a859b8763505c8b2fc16f6f2850278f42e75e4e9936e274467682ef8918d280ef5866e2f10819d76ff632811895ab482850422eb4a26a4d2c85e36bdca24e1271d8833f01216a7d1c0343f5e08496a4e33c6df49929b20b82c7bead2482c47eee943b7cf4e73e32aa0e1eedc35c3051f6fef8fd3ad32fe8545b76528284eed4bf0fdb3608bb75ea57ff87207105b313d326e3887f219ccb9d7e7c28cc98c41ff981f877faed6511da67c6ea3e35f0767c60c77d7901a87b4ebb0d7077f0fefcc80ff4d0edb21b90af648b60cdc45f3f2724b5b1ae0fe16ee863ffbe9b792cbe1366ed4f6b6d4f39aba1644923441d7c8936f8def0e65cc8f691cca19faa9b59a955f76abe6cde724c206f049fff2e2cd1702ea4d14b6eabda68a9c45c37d5117c71525431dfa80d3b97b42ed40e9cb3bc67e2e28d023d67aca625d7c8888ab1b3e6d6da70dfcdea40ce1d1a644318918bb3642fbaa1131cb2b12bf4c993f3b58d4f7bceaf84d58b440948b5133d9c297d4b141ac951def9da1931ca10d0e03bf89d69ba914", 0x1000, 0xffffffffffffffff) request_key(&(0x7f0000001500)='ashmm\xf8\xd5\x01\xd9\xb7\x00\x90!-\t\x00\x00\x00\a1\x00', &(0x7f0000000300)={'exz', 0x3}, &(0x7f0000000380)='/dev/media#\x00', r0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x800) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) fsync(r2) ioctl(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000180)={&(0x7f0000788000/0x3000)=nil, 0x2, 0x3, 0x1, &(0x7f0000ffb000/0x4000)=nil}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000073b000/0x4000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 03:45:26 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x58}, 0x0) 03:45:26 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x60000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3082.729749][T20340] atomic_op 00000000fd68baea conn xmit_atomic 0000000016d46f7e [ 3082.750453][T20346] validate_nla: 14 callbacks suppressed [ 3082.750463][T20346] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:26 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0xf}, 0x0) [ 3082.807251][T20348] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3082.832376][T20342] FAULT_FLAG_ALLOW_RETRY missing 20 [ 3082.844785][T20342] CPU: 0 PID: 20342 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3082.853942][T20342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3082.864016][T20342] Call Trace: [ 3082.867453][T20342] dump_stack+0x172/0x1f0 [ 3082.871815][T20342] handle_userfault.cold+0x41/0x5e [ 3082.877048][T20342] ? __lock_acquire+0x537/0x4af0 [ 3082.882016][T20342] ? perf_trace_lock_acquire+0xf5/0x530 [ 3082.887596][T20342] ? userfaultfd_ioctl+0x3aa0/0x3aa0 [ 3082.892905][T20342] ? find_held_lock+0x35/0x130 [ 3082.897690][T20342] ? do_huge_pmd_anonymous_page+0xc0c/0x1660 [ 3082.903714][T20342] ? lock_downgrade+0x920/0x920 [ 3082.908602][T20342] ? rwlock_bug.part.0+0x90/0x90 [ 3082.913657][T20342] ? kasan_check_read+0x11/0x20 [ 3082.918533][T20342] ? do_raw_spin_unlock+0x57/0x270 [ 3082.923673][T20342] do_huge_pmd_anonymous_page+0xc19/0x1660 [ 3082.929556][T20342] ? __might_sleep+0x95/0x190 [ 3082.934356][T20342] ? prep_transhuge_page+0xa0/0xa0 [ 3082.939498][T20342] ? pmd_val+0x100/0x100 [ 3082.943782][T20342] __handle_mm_fault+0x2d59/0x3eb0 [ 3082.948930][T20342] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3082.954504][T20342] ? handle_mm_fault+0x292/0xa90 [ 3082.959565][T20342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3082.965854][T20342] ? kasan_check_read+0x11/0x20 [ 3082.970742][T20342] handle_mm_fault+0x3b7/0xa90 [ 3082.975572][T20342] __get_user_pages+0x7b6/0x1a40 [ 3082.980637][T20342] ? follow_page_mask+0x19a0/0x19a0 [ 3082.985856][T20342] ? lock_acquire+0x16f/0x3f0 [ 3082.990573][T20342] get_user_pages_locked+0x1d2/0x4d0 [ 3082.991128][T20346] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:26 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x58}, 0x0) [ 3082.995905][T20342] kernel_get_mempolicy+0x5f8/0xeb0 [ 3082.995926][T20342] ? put_timespec64+0xda/0x140 [ 3082.995944][T20342] ? sp_free+0x70/0x70 [ 3082.995966][T20342] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3082.995980][T20342] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3082.995994][T20342] ? do_syscall_64+0x26/0x680 [ 3082.996012][T20342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3082.996025][T20342] ? do_syscall_64+0x26/0x680 [ 3082.996045][T20342] __x64_sys_get_mempolicy+0xbe/0x150 [ 3082.996063][T20342] do_syscall_64+0xfd/0x680 [ 3082.996087][T20342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3083.029334][T20342] RIP: 0033:0x459279 [ 3083.040080][T20342] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3083.040090][T20342] RSP: 002b:00007fb9c1e98c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ef [ 3083.040106][T20342] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459279 03:45:26 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x17}, 0x0) [ 3083.040115][T20342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3083.040124][T20342] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 3083.040133][T20342] R10: 000000002073b000 R11: 0000000000000246 R12: 00007fb9c1e996d4 [ 3083.040142][T20342] R13: 00000000004bfc58 R14: 00000000004d1830 R15: 00000000ffffffff [ 3083.093569][T20348] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3083.197946][T20362] atomic_op 00000000c0a22f6a conn xmit_atomic 0000000016d46f7e 03:45:26 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x58}, 0x0) 03:45:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup3(r0, r0, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) geteuid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$peek(0x2, 0x0, &(0x7f00000000c0)) 03:45:26 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x24}, 0x0) 03:45:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0xd, &(0x7f0000000040)={@broadcast, @multicast1}, 0x8) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007af) 03:45:26 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x68000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:27 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}}], 0x58}, 0x0) 03:45:27 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x68}, 0x0) 03:45:27 executing program 5: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x920, 0x0, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 3083.679847][T20386] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3083.784333][T20393] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}}], 0x58}, 0x0) 03:45:27 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x5000}, 0x0) [ 3083.991094][T20393] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}], 0x58}, 0x0) [ 3084.046705][T20386] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3084.104199][ C0] net_ratelimit: 18 callbacks suppressed [ 3084.104208][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.115837][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:27 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x20000318}, 0x0) [ 3084.184187][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.190018][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:27 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x6c000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:27 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x2}, 0x0) 03:45:27 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000001280)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 03:45:27 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407d00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3084.504206][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.510067][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3084.516014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3084.521890][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:45:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}}], 0x58}, 0x0) [ 3084.655835][T20433] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:28 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x3}, 0x0) [ 3084.719077][T20435] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:28 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}}], 0x58}, 0x0) [ 3085.024299][T20453] rds_sendmsg: 5 callbacks suppressed [ 3085.024384][T20453] atomic_op 0000000034d216ca conn xmit_atomic 0000000016d46f7e [ 3085.315003][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3085.321640][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000004c0)='/dev/dri/card#\x00', 0x0, 0x40000) 03:45:28 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = socket(0x0, 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, 0x0) 03:45:28 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x4}, 0x0) 03:45:28 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}}], 0x58}, 0x0) 03:45:28 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003407e00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:28 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x74000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3085.460293][T20467] atomic_op 00000000d1927a05 conn xmit_atomic 0000000016d46f7e 03:45:28 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x8}, 0x0) 03:45:28 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}}], 0x58}, 0x0) 03:45:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") msgctl$IPC_STAT(0x0, 0xd, &(0x7f0000000080)=""/209) 03:45:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x102, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4], 0x1f004}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="b8010000000f01c1f20f01df64640f07660fe94000b8010000000f01d90f353e0f232fb9f30800000f3266ba420066ed0f20d835200000000f22d8", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3085.697344][T20463] __nla_validate_parse: 14 callbacks suppressed [ 3085.697355][T20463] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3085.702723][T20484] atomic_op 000000009359e555 conn xmit_atomic 0000000016d46f7e 03:45:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfc}, 0x0) [ 3085.797397][T20466] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x58}, 0x0) 03:45:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1, 0x84}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) [ 3086.037855][T20501] atomic_op 00000000dc99be42 conn xmit_atomic 0000000016d46f7e 03:45:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000}}], 0x58}, 0x0) 03:45:29 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408200000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:29 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x7a000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x300}, 0x0) [ 3086.302728][T20513] atomic_op 00000000c5b6fa2d conn xmit_atomic 0000000016d46f7e 03:45:29 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="3400000000003c00000046eec495"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 3086.361423][T20518] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3086.393714][T20519] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x2000}, 0x0) 03:45:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000}}], 0x58}, 0x0) 03:45:30 executing program 2: inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000000) inotify_rm_watch(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) recvmmsg(r0, &(0x7f0000005dc0)=[{{&(0x7f0000001a00)=@rc, 0x80, 0x0}, 0x3ff}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001c80)=""/27, 0x1b}, {&(0x7f0000001cc0)=""/9, 0x9}, {0x0}], 0x3, &(0x7f00000021c0)=""/105, 0x69}, 0x5bee775b}, {{&(0x7f0000002240)=@alg, 0x80, &(0x7f00000022c0)}, 0x2}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 03:45:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x4000}, 0x0) [ 3086.728195][T20535] atomic_op 0000000058512739 conn xmit_atomic 0000000016d46f7e [ 3086.740826][T20518] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3086.815158][T20519] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x80fe}, 0x0) 03:45:30 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}}], 0x58}, 0x0) 03:45:30 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408300000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:30 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x9effffff) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3087.179026][T20555] atomic_op 00000000d1118a8f conn xmit_atomic 0000000016d46f7e 03:45:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xc0fe}, 0x0) 03:45:30 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x58}, 0x0) [ 3087.367925][T20562] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x2c}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:45:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfc00}, 0x0) [ 3087.477286][T20571] atomic_op 00000000dc47faa5 conn xmit_atomic 0000000016d46f7e 03:45:31 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}], 0x58}, 0x0) 03:45:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfe80}, 0x0) [ 3087.634758][T20562] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:31 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xc00e0000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:31 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1c) recvmmsg(r0, &(0x7f0000003240)=[{{&(0x7f0000000400)=@can, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f0000000480)=""/127, 0x7f}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000000500)=""/29, 0x1d}, {&(0x7f0000000540)=""/58, 0x3a}], 0x5, &(0x7f00000005c0)=""/104, 0x68}, 0x8}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/208, 0xd0}, {&(0x7f0000001900)=""/140, 0x8c}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x102, &(0x7f0000003300)={0x77359400}) 03:45:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x2) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) write$binfmt_elf32(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="7f12bbf53fda000000000000000000000000000000050001381a3517000000000000000000007809157923"], 0x2b) [ 3087.846758][T20590] atomic_op 0000000024c4b4a1 conn xmit_atomic 0000000016d46f7e 03:45:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfec0}, 0x0) 03:45:31 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408400000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:31 executing program 2: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) shutdown(0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) fstat(r0, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xcb2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd9f4}, 0x1c) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x920, 0x0, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:45:31 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}}], 0x58}, 0x0) 03:45:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xff00}, 0x0) [ 3088.190982][T20614] atomic_op 0000000046a1b056 conn xmit_atomic 0000000016d46f7e [ 3088.217518][T20617] sg_write: data in/out 55835/1 bytes for SCSI command 0x0-- guessing data in; [ 3088.217518][T20617] program syz-executor.5 not setting count and/or reply_len properly [ 3088.261819][T20619] validate_nla: 12 callbacks suppressed [ 3088.261829][T20619] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:31 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x58}, 0x0) [ 3088.316334][T20624] sg_write: data in/out 55835/1 bytes for SCSI command 0x0-- guessing data in; [ 3088.316334][T20624] program syz-executor.5 not setting count and/or reply_len properly 03:45:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x1a000}, 0x0) [ 3088.360556][T20619] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:31 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xf0ffffff) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:31 executing program 5: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) ftruncate(r0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 03:45:31 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000}}], 0x58}, 0x0) 03:45:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x40000}, 0x0) 03:45:32 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xfffff000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3088.699958][T20619] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3088.748238][T20619] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:32 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x58}, 0x0) 03:45:32 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408500000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3089.248215][T20668] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3089.458515][T20668] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3089.467046][ C0] net_ratelimit: 22 callbacks suppressed [ 3089.467055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.467132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3089.467266][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3089.467319][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:32 executing program 2: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) unshare(0x400) shutdown(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xcb2, @initdev, 0xd9f4}, 0x1c) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:45:32 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x100000}, 0x0) 03:45:32 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xffffff7f) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:32 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x58}, 0x0) 03:45:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}], 0x58}, 0x0) 03:45:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x3ffdb8}, 0x0) 03:45:33 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000080)) 03:45:33 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408600000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xa00100}, 0x0) 03:45:33 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xffffff9e) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3089.903446][T20689] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:33 executing program 2: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) unshare(0x400) shutdown(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xcb2, @initdev, 0xd9f4}, 0x1c) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 3090.067715][T20700] rds_sendmsg: 4 callbacks suppressed [ 3090.067782][T20700] atomic_op 00000000787f8c23 conn xmit_atomic 0000000016d46f7e 03:45:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x1000000}, 0x0) 03:45:33 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xfffffff0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}], 0x58}, 0x0) 03:45:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) [ 3090.248052][T20689] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:33 executing program 2: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) unshare(0x400) shutdown(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xcb2, @initdev, 0xd9f4}, 0x1c) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 03:45:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x2000000}, 0x0) [ 3090.344112][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.349969][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3090.383847][T20719] atomic_op 00000000d586c667 conn xmit_atomic 0000000016d46f7e [ 3090.424191][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.430086][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}}], 0x58}, 0x0) 03:45:33 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408700000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 03:45:34 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x40030000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x3000000}, 0x0) 03:45:34 executing program 2: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) unshare(0x400) shutdown(0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xcb2, @initdev, 0xd9f4}, 0x1c) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) [ 3090.733993][T20739] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3090.744158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3090.750565][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3090.759662][T20740] atomic_op 0000000091807189 conn xmit_atomic 0000000016d46f7e [ 3090.825004][T20739] __nla_validate_parse: 4 callbacks suppressed [ 3090.825014][T20739] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:34 executing program 5: 03:45:34 executing program 2: 03:45:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}], 0x58}, 0x0) 03:45:34 executing program 2: 03:45:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x8000000}, 0x0) [ 3090.966334][T20744] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3091.025283][T20744] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:34 executing program 5: 03:45:34 executing program 2: [ 3091.116072][T20768] atomic_op 0000000051304089 conn xmit_atomic 0000000016d46f7e [ 3091.340210][T20739] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3091.394525][T20739] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3091.420792][T20744] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3091.454405][T20744] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:34 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408800000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x20000000}, 0x0) 03:45:34 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xf0ffffffffffff) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:34 executing program 5: 03:45:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x58}, 0x0) 03:45:34 executing program 2: 03:45:34 executing program 5: 03:45:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x40000000}, 0x0) 03:45:34 executing program 2: [ 3091.619159][T20788] atomic_op 00000000bb1b1f35 conn xmit_atomic 0000000016d46f7e [ 3091.637370][T20789] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:35 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x58}, 0x0) 03:45:35 executing program 2: 03:45:35 executing program 5: [ 3091.888856][T20807] atomic_op 000000007d68bc39 conn xmit_atomic 0000000016d46f7e [ 3092.036117][T20789] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:35 executing program 5: 03:45:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xb8fd3f00}, 0x0) 03:45:35 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408900000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:35 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) 03:45:35 executing program 2: 03:45:35 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x100000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:35 executing program 2: 03:45:35 executing program 5: [ 3092.266591][T20824] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3092.293303][T20826] atomic_op 000000004037aab8 conn xmit_atomic 0000000016d46f7e 03:45:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfc000000}, 0x0) [ 3092.392128][T20834] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:35 executing program 5: 03:45:35 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x58}, 0x0) 03:45:35 executing program 2: 03:45:36 executing program 5: 03:45:36 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfe800000}, 0x0) [ 3092.657015][T20824] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3092.715801][T20847] atomic_op 000000000c1b3095 conn xmit_atomic 0000000016d46f7e [ 3092.741130][T20834] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:36 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408a00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:36 executing program 2: 03:45:36 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}}], 0x58}, 0x0) 03:45:36 executing program 5: 03:45:36 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfec00000}, 0x0) 03:45:36 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x200000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:36 executing program 2: 03:45:36 executing program 5: [ 3093.101426][T20868] atomic_op 000000008d7b9059 conn xmit_atomic 0000000016d46f7e 03:45:36 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfeffffff}, 0x0) 03:45:36 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}}], 0x58}, 0x0) 03:45:36 executing program 5: 03:45:36 executing program 2: [ 3093.488147][T20889] atomic_op 00000000d01a6048 conn xmit_atomic 0000000016d46f7e [ 3093.498944][T20869] validate_nla: 8 callbacks suppressed [ 3093.498955][T20869] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3093.552547][T20871] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:37 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408b00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xff000000}, 0x0) 03:45:37 executing program 5: 03:45:37 executing program 2: 03:45:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}], 0x58}, 0x0) 03:45:37 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x300000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:37 executing program 2: 03:45:37 executing program 5: 03:45:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}}], 0x58}, 0x0) 03:45:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfffffffe}, 0x0) 03:45:37 executing program 5: [ 3093.914413][T20910] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:37 executing program 2: [ 3094.338675][T20910] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:37 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}}], 0x58}, 0x0) 03:45:37 executing program 5: 03:45:37 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x400000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:37 executing program 2: 03:45:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x100000000000}, 0x0) [ 3094.468750][T20937] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3094.504159][ C0] net_ratelimit: 18 callbacks suppressed [ 3094.504177][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x4000000000000}, 0x0) 03:45:37 executing program 2: 03:45:37 executing program 5: [ 3094.515997][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}}], 0x58}, 0x0) [ 3094.584195][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.590053][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.629510][T20950] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xa0010000000000}, 0x0) 03:45:38 executing program 5: [ 3094.904158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.911091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.917057][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3094.922945][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3094.976077][T20950] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3095.013202][T20937] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:38 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408d00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:38 executing program 2: 03:45:38 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}}], 0x58}, 0x0) 03:45:38 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x500000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:38 executing program 5: 03:45:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x100000000000000}, 0x0) 03:45:38 executing program 2: [ 3095.199712][T20971] rds_sendmsg: 4 callbacks suppressed [ 3095.199734][T20971] atomic_op 0000000030b68abf conn xmit_atomic 0000000016d46f7e 03:45:38 executing program 5: r0 = socket$inet6(0xa, 0x10000000000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x2, 0x7, 0x5, 0x0, 0x0, 0x500], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0x2b, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x4, [0x60ea000000000000]}, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 3095.279168][T20976] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3095.318496][T20981] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:38 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}}], 0x58}, 0x0) 03:45:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x200000000000000}, 0x0) 03:45:38 executing program 2: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/.ev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 03:45:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) [ 3095.618723][T20998] atomic_op 000000007b9b8951 conn xmit_atomic 0000000016d46f7e [ 3095.661046][T20996] FAULT_FLAG_ALLOW_RETRY missing 70 [ 3095.673924][T20996] CPU: 1 PID: 20996 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3095.683895][T20996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3095.693974][T20996] Call Trace: [ 3095.697311][T20996] dump_stack+0x172/0x1f0 [ 3095.701690][T20996] handle_userfault.cold+0x41/0x5e [ 3095.707034][T20996] ? lock_downgrade+0x920/0x920 [ 3095.712011][T20996] ? kasan_check_read+0x11/0x20 [ 3095.716883][T20996] ? userfaultfd_ioctl+0x3aa0/0x3aa0 [ 3095.722250][T20996] ? find_get_entry+0x483/0x770 [ 3095.727221][T20996] ? find_get_pages_contig+0xa00/0xa00 [ 3095.732828][T20996] ? userfaultfd_ctx_put+0x3b0/0x3b0 [ 3095.738843][T20996] ? find_lock_entry+0x1a3/0x510 [ 3095.743834][T20996] shmem_getpage_gfp+0x1e25/0x2500 [ 3095.749073][T20996] ? shmem_unuse_inode+0x1010/0x1010 [ 3095.754553][T20996] ? lock_downgrade+0x920/0x920 [ 3095.759606][T20996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3095.766168][T20996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3095.772452][T20996] shmem_fault+0x22d/0x760 [ 3095.776920][T20996] ? shmem_read_mapping_page_gfp+0x1a0/0x1a0 [ 3095.782933][T20996] ? find_lock_entry+0x510/0x510 [ 3095.787973][T20996] ? pmd_val+0x85/0x100 [ 3095.792171][T20996] ? pmd_val+0x85/0x100 [ 3095.796352][T20996] __do_fault+0x111/0x4d0 [ 3095.800795][T20996] __handle_mm_fault+0x2c67/0x3eb0 [ 3095.806107][T20996] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 3095.811685][T20996] ? handle_mm_fault+0x292/0xa90 [ 3095.816919][T20996] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3095.823186][T20996] ? kasan_check_read+0x11/0x20 [ 3095.828097][T20996] handle_mm_fault+0x3b7/0xa90 [ 3095.832885][T20996] __do_page_fault+0x5ef/0xda0 [ 3095.837769][T20996] do_page_fault+0x71/0x57d [ 3095.842294][T20996] ? page_fault+0x8/0x30 [ 3095.846653][T20996] page_fault+0x1e/0x30 [ 3095.850830][T20996] RIP: 0033:0x452c10 [ 3095.854749][T20996] Code: 0f 84 c4 0f 00 00 48 89 f1 48 89 f8 48 83 e1 3f 48 83 f9 20 0f 86 7b 02 00 00 48 83 e6 f0 48 83 e1 0f 66 0f ef c0 66 0f ef c9 <66> 0f 74 0e 66 0f d7 d1 48 d3 ea 49 c7 c2 11 00 00 00 49 29 ca 4d [ 3095.874363][T20996] RSP: 002b:00007fb9c1e987a8 EFLAGS: 00010202 [ 3095.880446][T20996] RAX: 00007fb9c1e98850 RBX: 0000000000000003 RCX: 000000000000000e [ 3095.888516][T20996] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007fb9c1e98850 [ 3095.896641][T20996] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 3095.904730][T20996] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb9c1e996d4 [ 3095.912823][T20996] R13: 00000000004c83ed R14: 00000000004dec70 R15: 00000000ffffffff [ 3095.922013][T20976] __nla_validate_parse: 13 callbacks suppressed [ 3095.922027][T20976] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3095.924175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3095.943564][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:39 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408e00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x300000000000000}, 0x0) 03:45:39 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x600000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:39 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x58}, 0x0) [ 3096.171179][T21010] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:39 executing program 5: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x920, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:45:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00510) 03:45:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x800000000000000}, 0x0) [ 3096.272571][T21015] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3096.419158][T21023] atomic_op 000000000e787093 conn xmit_atomic 0000000016d46f7e 03:45:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x2000000000000000}, 0x0) 03:45:39 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000}}], 0x58}, 0x0) [ 3096.582530][T21015] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3096.614652][T21010] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3096.741638][T21042] atomic_op 000000007156d714 conn xmit_atomic 0000000016d46f7e 03:45:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x4000000000000000}, 0x0) 03:45:40 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000}}], 0x58}, 0x0) 03:45:40 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003408f00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:40 executing program 5: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x920, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:45:40 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x700000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3096.979247][T21053] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3097.035624][T21055] atomic_op 000000003b9d66f5 conn xmit_atomic 0000000016d46f7e 03:45:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xb8fd3f0000000000}, 0x0) [ 3097.110418][T21063] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:40 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x58}, 0x0) 03:45:40 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}}], 0x58}, 0x0) [ 3097.297598][T21053] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfc00000000000000}, 0x0) [ 3097.436730][T21079] atomic_op 00000000ec9b25bf conn xmit_atomic 0000000016d46f7e [ 3097.467574][T21063] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:40 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409000000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3097.526824][T21080] atomic_op 0000000073bb1b4b conn xmit_atomic 0000000016d46f7e 03:45:40 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x58}, 0x0) 03:45:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfe80000000000000}, 0x0) 03:45:41 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x58}, 0x0) [ 3097.724782][T21089] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:41 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x819000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3097.874819][T21094] atomic_op 00000000d705125b conn xmit_atomic 0000000016d46f7e 03:45:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfec0000000000000}, 0x0) [ 3097.929900][T21102] atomic_op 0000000044ac1326 conn xmit_atomic 0000000016d46f7e 03:45:41 executing program 5: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x920, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:45:41 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x58}, 0x0) 03:45:41 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x58}, 0x0) [ 3098.262659][T21115] atomic_op 000000005042389e conn xmit_atomic 0000000016d46f7e 03:45:41 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x58}, 0x0) 03:45:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xfeffffff00000000}, 0x0) 03:45:41 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xa00000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:42 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409100000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x58}, 0x0) 03:45:42 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}}], 0x58}, 0x0) [ 3098.836553][T21130] validate_nla: 14 callbacks suppressed [ 3098.836574][T21130] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xff00000000000000}, 0x0) [ 3098.941920][T21140] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x58}, 0x0) 03:45:42 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}], 0x58}, 0x0) 03:45:42 executing program 5: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x920, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:45:42 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}}], 0x58}, 0x0) 03:45:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x58}, 0x0) 03:45:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xffffffff00000000}, 0x0) [ 3099.253467][T21130] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3099.380259][T21140] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:42 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0xff00000000000000}, 0x0) 03:45:42 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xf00000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3099.665180][T21178] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:43 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409200000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:43 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}], 0x58}, 0x0) 03:45:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}], 0x58}, 0x0) 03:45:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x58}, 0x0) [ 3100.021178][T21178] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3100.095896][T21190] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3100.114118][ C0] net_ratelimit: 22 callbacks suppressed [ 3100.114126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.125841][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.131698][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.137580][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:43 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x58}, 0x0) 03:45:43 executing program 2: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:45:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x58}, 0x0) 03:45:43 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x2000000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3100.411658][T21216] rds_sendmsg: 11 callbacks suppressed [ 3100.411734][T21216] atomic_op 00000000ce55e343 conn xmit_atomic 0000000016d46f7e [ 3100.438733][T21214] atomic_op 000000004c0df2ae conn xmit_atomic 0000000016d46f7e [ 3100.447909][T21190] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3100.468232][T21218] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3100.663098][T21218] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:44 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409300000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:44 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x1a000}}], 0x58}, 0x0) 03:45:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x58}, 0x0) 03:45:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3100.744142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.750001][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.823049][T21228] atomic_op 000000005467f4ba conn xmit_atomic 0000000016d46f7e [ 3100.831280][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3100.831857][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3100.858005][T21231] atomic_op 00000000d1f58651 conn xmit_atomic 0000000016d46f7e 03:45:44 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x3f00000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}}], 0x58}, 0x0) 03:45:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3101.077343][T21247] __nla_validate_parse: 14 callbacks suppressed [ 3101.077354][T21247] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3101.095411][T21246] atomic_op 00000000e7198174 conn xmit_atomic 0000000016d46f7e [ 3101.133876][T21237] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3101.144204][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3101.150018][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:45:44 executing program 2: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:45:44 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}], 0x58}, 0x0) 03:45:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}}], 0x58}, 0x0) 03:45:44 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0xfeffffff}}], 0x58}, 0x0) [ 3101.396963][T21265] atomic_op 000000008df04e15 conn xmit_atomic 0000000016d46f7e [ 3101.415212][T21247] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:44 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409400000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:44 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x58}, 0x0) [ 3101.470966][T21268] atomic_op 00000000098f1726 conn xmit_atomic 0000000016d46f7e 03:45:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}], 0x58}, 0x0) [ 3101.661696][T21279] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:45 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x4000000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:45 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0xfc00}}], 0x58}, 0x0) 03:45:45 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x4000}}], 0x58}, 0x0) 03:45:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3101.817717][T21287] atomic_op 0000000070d86ada conn xmit_atomic 0000000016d46f7e [ 3101.842992][T21290] atomic_op 000000006b515c44 conn xmit_atomic 0000000016d46f7e [ 3101.867739][T21292] atomic_op 00000000ed595589 conn xmit_atomic 0000000016d46f7e 03:45:45 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}}], 0x58}, 0x0) 03:45:45 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x0, 0x300}}], 0x58}, 0x0) [ 3101.918945][T21297] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:45 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0xfc00000000000000}}], 0x58}, 0x0) [ 3102.023377][T21279] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3102.291470][T21297] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:45 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409500000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:45 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}}], 0x58}, 0x0) 03:45:45 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0, 0x8}}], 0x58}, 0x0) 03:45:45 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x60000000}}], 0x58}, 0x0) [ 3102.492098][T21330] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:45 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x4800000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:45 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x4c000000}}], 0x58}, 0x0) 03:45:45 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}}], 0x58}, 0x0) 03:45:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x34000, 0x8) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000280)=@req3={0x2, 0x6, 0x79e5, 0x4, 0x6, 0x1, 0x10000}, 0x1c) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x8, @loopback}}, 0x3ff, 0x1}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={r2, 0x2bbc, 0x7fff}, 0x8) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r3, 0x0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x0) 03:45:46 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x6000000}}], 0x58}, 0x0) 03:45:46 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0xfec0000000000000}}], 0x58}, 0x0) [ 3102.746275][T21346] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:46 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}], 0x58}, 0x0) [ 3102.796286][T21330] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:46 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409600000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:46 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0xfffffffe}}], 0x58}, 0x0) 03:45:46 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x58}, 0x0) 03:45:46 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x4c00000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:46 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0xfe800000}}], 0x58}, 0x0) 03:45:46 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}], 0x58}, 0x0) 03:45:46 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x8000000000000000) 03:45:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:46 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x68000000}}], 0x58}, 0x0) 03:45:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:46 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x10e, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:45:47 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:47 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x58}, 0x0) 03:45:47 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409700000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:47 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x106, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3103.965860][T21391] validate_nla: 15 callbacks suppressed [ 3103.965870][T21391] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3104.058159][T21420] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:47 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x6000000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x300000000000000, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:45:47 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x58}, 0x0) 03:45:47 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x106, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:45:47 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3104.166321][T21420] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:47 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x4000000000000, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:45:47 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x58}, 0x0) 03:45:47 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:47 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x700}}], 0x58}, 0x0) [ 3104.293347][T21437] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:47 executing program 5 (fault-call:9 fault-nth:0): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:45:47 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409800000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:47 executing program 2 (fault-call:8 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 3104.673312][T21455] FAULT_INJECTION: forcing a failure. [ 3104.673312][T21455] name failslab, interval 1, probability 0, space 0, times 0 [ 3104.744954][T21461] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3104.754864][T21455] CPU: 1 PID: 21455 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3104.764109][T21455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3104.764118][T21455] Call Trace: [ 3104.764144][T21455] dump_stack+0x172/0x1f0 [ 3104.764180][T21455] should_fail.cold+0xa/0x15 [ 3104.777686][T21455] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3104.786695][T21455] ? ___might_sleep+0x163/0x280 [ 3104.786719][T21455] __should_failslab+0x121/0x190 [ 3104.786736][T21455] ? sock_destroy_inode+0x60/0x60 [ 3104.786749][T21455] should_failslab+0x9/0x14 [ 3104.786762][T21455] kmem_cache_alloc+0x2af/0x6f0 [ 3104.786776][T21455] ? ksys_dup3+0x3e0/0x3e0 [ 3104.786797][T21455] ? sock_destroy_inode+0x60/0x60 [ 3104.807597][T21455] sock_alloc_inode+0x1d/0x260 [ 3104.807618][T21455] alloc_inode+0x68/0x1e0 [ 3104.807639][T21455] new_inode_pseudo+0x19/0xf0 [ 3104.822509][T21463] input: syz1 as /devices/virtual/input/input114 [ 3104.826431][T21455] sock_alloc+0x41/0x270 [ 3104.826450][T21455] __sys_accept4+0xe2/0x6a0 [ 3104.826466][T21455] ? wait_for_completion+0x440/0x440 [ 3104.826482][T21455] ? __ia32_sys_listen+0x80/0x80 [ 3104.826502][T21455] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3104.826524][T21455] ? fput_many+0x12c/0x1a0 [ 3104.846629][T21455] ? fput+0x1b/0x20 [ 3104.846646][T21455] ? ksys_write+0x1cf/0x290 [ 3104.846672][T21455] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3104.846694][T21455] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3104.855528][T21455] ? do_syscall_64+0x26/0x680 [ 3104.855546][T21455] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3104.855560][T21455] ? do_syscall_64+0x26/0x680 [ 3104.855582][T21455] __x64_sys_accept4+0x97/0xf0 [ 3104.855605][T21455] do_syscall_64+0xfd/0x680 [ 3104.872084][T21455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3104.872098][T21455] RIP: 0033:0x459279 [ 3104.872120][T21455] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3104.878762][T21466] FAULT_INJECTION: forcing a failure. [ 3104.878762][T21466] name failslab, interval 1, probability 0, space 0, times 0 [ 3104.880332][T21455] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3104.880348][T21455] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 [ 3104.880357][T21455] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3104.880366][T21455] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3104.880385][T21455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3104.895795][T21455] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 [ 3104.922399][T21437] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3104.941050][T21466] CPU: 0 PID: 21466 Comm: syz-executor.2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3105.029063][T21466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3105.039216][T21466] Call Trace: [ 3105.042554][T21466] dump_stack+0x172/0x1f0 [ 3105.046906][T21466] should_fail.cold+0xa/0x15 [ 3105.051514][T21466] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3105.057336][T21466] ? ___might_sleep+0x163/0x280 [ 3105.062211][T21466] __should_failslab+0x121/0x190 [ 3105.067164][T21466] should_failslab+0x9/0x14 [ 3105.069699][T21461] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3105.071683][T21466] __kmalloc+0x2d9/0x740 [ 3105.071703][T21466] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 3105.071721][T21466] ? rcu_read_lock_sched_held+0x110/0x130 [ 3105.071742][T21466] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 3105.101221][T21466] tomoyo_realpath_from_path+0xcd/0x7a0 [ 3105.106790][T21466] ? tomoyo_path_number_perm+0x193/0x520 [ 3105.112445][T21466] tomoyo_path_number_perm+0x1dd/0x520 [ 3105.118002][T21466] ? tomoyo_path_number_perm+0x193/0x520 [ 3105.123656][T21466] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3105.129509][T21466] ? perf_trace_lock_acquire+0xf5/0x530 [ 3105.135122][T21466] ? __fget+0x384/0x560 [ 3105.139395][T21466] ? ksys_dup3+0x3e0/0x3e0 03:45:48 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x6800000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:48 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}}], 0x58}, 0x0) 03:45:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3105.143829][T21466] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3105.150091][T21466] ? fput_many+0x12c/0x1a0 [ 3105.154546][T21466] tomoyo_file_ioctl+0x23/0x30 [ 3105.159331][T21466] security_file_ioctl+0x77/0xc0 [ 3105.164285][T21466] ksys_ioctl+0x57/0xd0 [ 3105.168505][T21466] __x64_sys_ioctl+0x73/0xb0 [ 3105.173117][T21466] do_syscall_64+0xfd/0x680 [ 3105.177643][T21466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3105.183563][T21466] RIP: 0033:0x459279 [ 3105.187469][T21466] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3105.207183][T21466] RSP: 002b:00007fb9c1e56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3105.215619][T21466] RAX: ffffffffffffffda RBX: 00007fb9c1e56c90 RCX: 0000000000459279 [ 3105.223616][T21466] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000004 [ 3105.231620][T21466] RBP: 000000000075c060 R08: 0000000000000000 R09: 0000000000000000 [ 3105.231641][T21466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb9c1e576d4 [ 3105.247651][T21466] R13: 00000000004c3ea9 R14: 00000000004d7ae8 R15: 0000000000000005 [ 3105.255977][ C0] net_ratelimit: 20 callbacks suppressed [ 3105.255990][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.267574][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:48 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409900000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:48 executing program 5 (fault-call:9 fault-nth:1): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3105.304282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.310194][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3105.316247][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3105.322067][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:45:48 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}], 0x58}, 0x0) 03:45:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3105.376403][T21466] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3105.412510][T21479] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3105.483380][T21481] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3105.519933][T21489] FAULT_INJECTION: forcing a failure. [ 3105.519933][T21489] name failslab, interval 1, probability 0, space 0, times 0 [ 3105.551597][T21490] rds_sendmsg: 18 callbacks suppressed [ 3105.551654][T21490] atomic_op 00000000ff4b2675 conn xmit_atomic 0000000016d46f7e [ 3105.576860][T21489] CPU: 1 PID: 21489 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3105.586124][T21489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3105.596200][T21489] Call Trace: [ 3105.599521][T21489] dump_stack+0x172/0x1f0 [ 3105.603975][T21489] should_fail.cold+0xa/0x15 [ 3105.608604][T21489] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3105.614442][T21489] ? ___might_sleep+0x163/0x280 [ 3105.619320][T21489] __should_failslab+0x121/0x190 [ 3105.624385][T21489] ? sock_destroy_inode+0x60/0x60 [ 3105.629451][T21489] should_failslab+0x9/0x14 [ 3105.633975][T21489] kmem_cache_alloc_trace+0x2ce/0x750 [ 3105.639356][T21489] ? kmem_cache_alloc+0x32b/0x6f0 [ 3105.639373][T21489] ? ksys_dup3+0x3e0/0x3e0 [ 3105.639395][T21489] ? sock_destroy_inode+0x60/0x60 [ 3105.639415][T21489] sock_alloc_inode+0x63/0x260 [ 3105.648863][T21489] alloc_inode+0x68/0x1e0 [ 3105.648884][T21489] new_inode_pseudo+0x19/0xf0 [ 3105.648902][T21489] sock_alloc+0x41/0x270 [ 3105.648925][T21489] __sys_accept4+0xe2/0x6a0 [ 3105.658888][T21489] ? wait_for_completion+0x440/0x440 [ 3105.658909][T21489] ? __ia32_sys_listen+0x80/0x80 [ 3105.658929][T21489] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3105.658951][T21489] ? fput_many+0x12c/0x1a0 [ 3105.693506][T21489] ? fput+0x1b/0x20 [ 3105.693523][T21489] ? ksys_write+0x1cf/0x290 [ 3105.693544][T21489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3105.693564][T21489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3105.701795][T21489] ? do_syscall_64+0x26/0x680 [ 3105.701814][T21489] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3105.701828][T21489] ? do_syscall_64+0x26/0x680 [ 3105.701850][T21489] __x64_sys_accept4+0x97/0xf0 [ 3105.701869][T21489] do_syscall_64+0xfd/0x680 [ 3105.701910][T21489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3105.711877][T21489] RIP: 0033:0x459279 [ 3105.711894][T21489] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3105.711902][T21489] RSP: 002b:00007faddd0c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3105.711917][T21489] RAX: ffffffffffffffda RBX: 00007faddd0c6c90 RCX: 0000000000459279 [ 3105.711926][T21489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 03:45:49 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x58}, 0x0) [ 3105.711934][T21489] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 3105.711943][T21489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0c76d4 [ 3105.711952][T21489] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 [ 3105.766272][T21479] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:49 executing program 5 (fault-call:9 fault-nth:2): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3105.914496][T21499] atomic_op 00000000b4569e6e conn xmit_atomic 0000000016d46f7e 03:45:49 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:45:49 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x6c00000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}}], 0x58}, 0x0) 03:45:49 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409a00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:49 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3106.187434][T21515] __nla_validate_parse: 14 callbacks suppressed [ 3106.187445][T21515] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3106.248965][T21512] input: syz1 as /devices/virtual/input/input115 [ 3106.292976][T21520] atomic_op 00000000f2a0d008 conn xmit_atomic 0000000016d46f7e [ 3106.344198][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.350534][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3106.356474][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3106.362275][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:45:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x58}, 0x0) [ 3106.395796][T21525] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3106.422664][T21524] FAULT_INJECTION: forcing a failure. [ 3106.422664][T21524] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.500768][T21524] CPU: 1 PID: 21524 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3106.509934][T21524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3106.520130][T21524] Call Trace: [ 3106.523461][T21524] dump_stack+0x172/0x1f0 [ 3106.527832][T21524] should_fail.cold+0xa/0x15 [ 3106.532472][T21524] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3106.538321][T21524] ? ___might_sleep+0x163/0x280 [ 3106.543377][T21524] __should_failslab+0x121/0x190 [ 3106.548342][T21524] should_failslab+0x9/0x14 [ 3106.552877][T21524] kmem_cache_alloc+0x2af/0x6f0 [ 3106.557752][T21524] ? __alloc_fd+0x44d/0x560 [ 3106.562283][T21524] __d_alloc+0x2e/0x8c0 [ 3106.566458][T21524] ? lock_downgrade+0x920/0x920 [ 3106.571338][T21524] d_alloc_pseudo+0x1e/0x70 [ 3106.575863][T21524] alloc_file_pseudo+0xe2/0x280 [ 3106.580729][T21524] ? kasan_check_read+0x11/0x20 [ 3106.585601][T21524] ? alloc_file+0x4d0/0x4d0 [ 3106.587361][T21515] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3106.590115][T21524] ? __alloc_fd+0x44d/0x560 [ 3106.590133][T21524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3106.590158][T21524] sock_alloc_file+0x4d/0x170 [ 3106.614947][T21524] __sys_accept4+0x259/0x6a0 [ 3106.619553][T21524] ? wait_for_completion+0x440/0x440 [ 3106.624852][T21524] ? __ia32_sys_listen+0x80/0x80 [ 3106.629816][T21524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3106.636130][T21524] ? rcu_read_lock_sched_held+0x110/0x130 [ 3106.641868][T21524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3106.647357][T21524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3106.652837][T21524] ? do_syscall_64+0x26/0x680 [ 3106.657535][T21524] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3106.663629][T21524] ? do_syscall_64+0x26/0x680 [ 3106.668352][T21524] __x64_sys_accept4+0x97/0xf0 [ 3106.673153][T21524] do_syscall_64+0xfd/0x680 [ 3106.673688][T21533] atomic_op 00000000015262d6 conn xmit_atomic 0000000016d46f7e [ 3106.677698][T21524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3106.677710][T21524] RIP: 0033:0x459279 03:45:50 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x2) [ 3106.677727][T21524] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3106.677734][T21524] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3106.677748][T21524] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 [ 3106.677757][T21524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3106.677766][T21524] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3106.677774][T21524] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3106.677783][T21524] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 03:45:50 executing program 5 (fault-call:9 fault-nth:3): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:45:50 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3106.812959][T21538] input: syz1 as /devices/virtual/input/input116 03:45:50 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}}], 0x58}, 0x0) 03:45:50 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x7400000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3106.859201][T21525] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3106.883012][T21538] input: syz1 as /devices/virtual/input/input117 [ 3107.020356][T21549] atomic_op 00000000af29b014 conn xmit_atomic 0000000016d46f7e [ 3107.047585][T21551] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x7) 03:45:50 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409b00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:50 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:50 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}}], 0x58}, 0x0) [ 3107.215887][T21562] FAULT_INJECTION: forcing a failure. [ 3107.215887][T21562] name failslab, interval 1, probability 0, space 0, times 0 [ 3107.371257][T21571] input: syz1 as /devices/virtual/input/input118 [ 3107.401073][T21562] CPU: 0 PID: 21562 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3107.410301][T21562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3107.412593][T21574] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3107.420390][T21562] Call Trace: [ 3107.420420][T21562] dump_stack+0x172/0x1f0 [ 3107.420446][T21562] should_fail.cold+0xa/0x15 [ 3107.420467][T21562] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3107.420490][T21562] ? ___might_sleep+0x163/0x280 [ 3107.420518][T21562] __should_failslab+0x121/0x190 [ 3107.420536][T21562] should_failslab+0x9/0x14 [ 3107.420553][T21562] kmem_cache_alloc+0x2af/0x6f0 [ 3107.420576][T21562] ? lock_downgrade+0x920/0x920 [ 3107.420600][T21562] __alloc_file+0x27/0x300 [ 3107.420620][T21562] alloc_empty_file+0x72/0x170 [ 3107.420643][T21562] alloc_file+0x5e/0x4d0 [ 3107.451575][T21576] atomic_op 00000000b86b4118 conn xmit_atomic 0000000016d46f7e [ 3107.452991][T21562] alloc_file_pseudo+0x189/0x280 [ 3107.453011][T21562] ? alloc_file+0x4d0/0x4d0 [ 3107.453028][T21562] ? __alloc_fd+0x44d/0x560 [ 3107.453056][T21562] sock_alloc_file+0x4d/0x170 [ 3107.512212][T21562] __sys_accept4+0x259/0x6a0 [ 3107.516833][T21562] ? wait_for_completion+0x440/0x440 [ 3107.522146][T21562] ? __ia32_sys_listen+0x80/0x80 [ 3107.527136][T21562] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3107.533401][T21562] ? fput_many+0x12c/0x1a0 [ 3107.537828][T21562] ? fput+0x1b/0x20 [ 3107.541649][T21562] ? ksys_write+0x1cf/0x290 [ 3107.546178][T21562] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3107.551650][T21562] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3107.557658][T21562] ? do_syscall_64+0x26/0x680 [ 3107.562383][T21562] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3107.568471][T21562] ? do_syscall_64+0x26/0x680 [ 3107.573179][T21562] __x64_sys_accept4+0x97/0xf0 [ 3107.577963][T21562] do_syscall_64+0xfd/0x680 [ 3107.582550][T21562] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3107.588453][T21562] RIP: 0033:0x459279 [ 3107.592358][T21562] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3107.611975][T21562] RSP: 002b:00007faddd0a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 03:45:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}}], 0x58}, 0x0) [ 3107.620410][T21562] RAX: ffffffffffffffda RBX: 00007faddd0a5c90 RCX: 0000000000459279 [ 3107.628398][T21562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3107.636384][T21562] RBP: 000000000075c060 R08: 0000000000000000 R09: 0000000000000000 [ 3107.644371][T21562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0a66d4 [ 3107.652470][T21562] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 03:45:51 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3107.731214][T21571] input: syz1 as /devices/virtual/input/input119 [ 3107.747450][T21574] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3107.751575][T21584] atomic_op 00000000c1fac7b9 conn xmit_atomic 0000000016d46f7e 03:45:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00}}], 0x58}, 0x0) 03:45:51 executing program 5 (fault-call:9 fault-nth:4): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3107.914579][T21551] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3108.010424][T21599] atomic_op 00000000e85f8920 conn xmit_atomic 0000000016d46f7e [ 3108.082473][T21600] FAULT_INJECTION: forcing a failure. [ 3108.082473][T21600] name failslab, interval 1, probability 0, space 0, times 0 [ 3108.103507][T21600] CPU: 1 PID: 21600 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3108.112675][T21600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3108.122761][T21600] Call Trace: [ 3108.126167][T21600] dump_stack+0x172/0x1f0 [ 3108.130720][T21600] should_fail.cold+0xa/0x15 [ 3108.135345][T21600] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3108.141211][T21600] ? ___might_sleep+0x163/0x280 [ 3108.146099][T21600] __should_failslab+0x121/0x190 [ 3108.151061][T21600] should_failslab+0x9/0x14 [ 3108.155589][T21600] kmem_cache_alloc+0x2af/0x6f0 [ 3108.160469][T21600] ? rcu_read_lock_sched_held+0x110/0x130 [ 3108.166211][T21600] ? kmem_cache_alloc+0x32b/0x6f0 [ 3108.171270][T21600] security_file_alloc+0x39/0x170 [ 3108.176370][T21600] __alloc_file+0xac/0x300 [ 3108.180826][T21600] alloc_empty_file+0x72/0x170 [ 3108.185622][T21600] alloc_file+0x5e/0x4d0 [ 3108.189898][T21600] alloc_file_pseudo+0x189/0x280 [ 3108.194850][T21600] ? alloc_file+0x4d0/0x4d0 [ 3108.199449][T21600] ? __alloc_fd+0x44d/0x560 [ 3108.203975][T21600] sock_alloc_file+0x4d/0x170 [ 3108.208674][T21600] __sys_accept4+0x259/0x6a0 [ 3108.213280][T21600] ? wait_for_completion+0x440/0x440 [ 3108.218577][T21600] ? __ia32_sys_listen+0x80/0x80 [ 3108.223530][T21600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3108.229785][T21600] ? fput_many+0x12c/0x1a0 [ 3108.234208][T21600] ? fput+0x1b/0x20 [ 3108.238021][T21600] ? ksys_write+0x1cf/0x290 [ 3108.242535][T21600] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3108.248010][T21600] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3108.253490][T21600] ? do_syscall_64+0x26/0x680 [ 3108.258189][T21600] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3108.258207][T21600] ? do_syscall_64+0x26/0x680 [ 3108.258230][T21600] __x64_sys_accept4+0x97/0xf0 [ 3108.258253][T21600] do_syscall_64+0xfd/0x680 03:45:51 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x7a00000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe}}], 0x58}, 0x0) [ 3108.269160][T21600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3108.269173][T21600] RIP: 0033:0x459279 [ 3108.269190][T21600] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3108.269198][T21600] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3108.278600][T21600] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 03:45:51 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:51 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3108.278610][T21600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3108.278619][T21600] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3108.278628][T21600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3108.278637][T21600] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 03:45:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x10) 03:45:51 executing program 5 (fault-call:9 fault-nth:5): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3108.417524][T21609] atomic_op 0000000069d9d5bf conn xmit_atomic 0000000016d46f7e [ 3108.435549][T21606] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:51 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3108.526108][T21611] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3108.578112][T21613] FAULT_INJECTION: forcing a failure. [ 3108.578112][T21613] name failslab, interval 1, probability 0, space 0, times 0 03:45:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x58}, 0x0) [ 3108.643902][T21613] CPU: 1 PID: 21613 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3108.654145][T21613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3108.664492][T21613] Call Trace: [ 3108.664551][T21613] dump_stack+0x172/0x1f0 [ 3108.664579][T21613] should_fail.cold+0xa/0x15 [ 3108.664605][T21613] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3108.664629][T21613] ? ___might_sleep+0x163/0x280 [ 3108.687686][T21613] __should_failslab+0x121/0x190 [ 3108.692773][T21613] should_failslab+0x9/0x14 [ 3108.697290][T21613] kmem_cache_alloc+0x2af/0x6f0 [ 3108.702158][T21613] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3108.704183][T21624] input: syz1 as /devices/virtual/input/input120 [ 3108.707988][T21613] ? lockdep_hardirqs_on+0x418/0x5d0 [ 3108.708008][T21613] ? trace_hardirqs_on+0x67/0x220 [ 3108.708030][T21613] sk_prot_alloc+0x67/0x2e0 [ 3108.708047][T21613] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 3108.708066][T21613] sk_alloc+0x39/0xf70 [ 3108.739177][T21613] tipc_sk_create+0xdb/0x2270 [ 3108.739196][T21613] ? __local_bh_enable_ip+0x15a/0x270 [ 3108.739213][T21613] ? tipc_sk_anc_data_recv.part.0+0x680/0x680 [ 3108.739228][T21613] ? lock_sock_nested+0x9a/0x120 [ 3108.739248][T21613] ? finish_wait+0x260/0x260 [ 3108.749311][T21613] ? __local_bh_enable_ip+0x15a/0x270 [ 3108.749338][T21613] tipc_accept+0x21a/0x1100 [ 3108.749359][T21613] ? ___might_sleep+0x163/0x280 [ 3108.774832][T21613] ? tipc_release+0x1830/0x1830 [ 3108.774849][T21613] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 3108.774865][T21613] ? aa_sk_perm+0x288/0x880 [ 3108.774880][T21613] ? __alloc_fd+0x44d/0x560 [ 3108.774904][T21613] ? apparmor_socket_accept+0xb6/0x160 [ 3108.774922][T21613] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3108.774944][T21613] __sys_accept4+0x34e/0x6a0 [ 3108.811269][T21613] ? __ia32_sys_listen+0x80/0x80 [ 3108.811291][T21613] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3108.811308][T21613] ? fput_many+0x12c/0x1a0 [ 3108.811323][T21613] ? fput+0x1b/0x20 [ 3108.811342][T21613] ? ksys_write+0x1cf/0x290 [ 3108.820187][T21633] atomic_op 00000000c93b4313 conn xmit_atomic 0000000016d46f7e [ 3108.820863][T21613] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3108.820882][T21613] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3108.820898][T21613] ? do_syscall_64+0x26/0x680 [ 3108.820917][T21613] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3108.820932][T21613] ? do_syscall_64+0x26/0x680 [ 3108.820954][T21613] __x64_sys_accept4+0x97/0xf0 [ 3108.820978][T21613] do_syscall_64+0xfd/0x680 [ 3108.840008][T21613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3108.863141][T21613] RIP: 0033:0x459279 [ 3108.863159][T21613] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3108.863167][T21613] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3108.863182][T21613] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 [ 3108.863191][T21613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 03:45:52 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3108.863200][T21613] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3108.863210][T21613] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3108.863219][T21613] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 03:45:52 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00}}], 0x58}, 0x0) 03:45:52 executing program 5 (fault-call:9 fault-nth:6): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3109.061277][T21606] validate_nla: 10 callbacks suppressed [ 3109.061289][T21606] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:52 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3109.193118][T21611] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3109.249894][T21647] FAULT_INJECTION: forcing a failure. [ 3109.249894][T21647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3109.263139][T21647] CPU: 1 PID: 21647 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3109.272435][T21647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3109.282591][T21647] Call Trace: [ 3109.282621][T21647] dump_stack+0x172/0x1f0 [ 3109.282644][T21647] should_fail.cold+0xa/0x15 [ 3109.282677][T21647] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3109.282705][T21647] ? perf_trace_lock_acquire+0xf5/0x530 [ 3109.306244][T21647] should_fail_alloc_page+0x50/0x60 [ 3109.311464][T21647] __alloc_pages_nodemask+0x1a1/0x8d0 [ 3109.316854][T21647] ? __alloc_pages_slowpath+0x2900/0x2900 [ 3109.322611][T21647] cache_grow_begin+0x9d/0x650 [ 3109.327389][T21647] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3109.333681][T21647] kmem_cache_alloc+0x628/0x6f0 [ 3109.338572][T21647] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3109.344395][T21647] sk_prot_alloc+0x67/0x2e0 03:45:52 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x9effffff00000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3109.348907][T21647] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 3109.354768][T21647] sk_alloc+0x39/0xf70 [ 3109.358968][T21647] tipc_sk_create+0xdb/0x2270 [ 3109.363664][T21647] ? __local_bh_enable_ip+0x15a/0x270 [ 3109.369059][T21647] ? tipc_sk_anc_data_recv.part.0+0x680/0x680 [ 3109.375223][T21647] ? lock_sock_nested+0x9a/0x120 [ 3109.380174][T21647] ? finish_wait+0x260/0x260 [ 3109.384775][T21647] ? __local_bh_enable_ip+0x15a/0x270 [ 3109.390224][T21647] tipc_accept+0x21a/0x1100 [ 3109.394737][T21647] ? ___might_sleep+0x163/0x280 [ 3109.399604][T21647] ? tipc_release+0x1830/0x1830 [ 3109.404574][T21647] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 3109.411111][T21647] ? aa_sk_perm+0x288/0x880 [ 3109.415629][T21647] ? __alloc_fd+0x44d/0x560 [ 3109.420153][T21647] ? apparmor_socket_accept+0xb6/0x160 [ 3109.420953][T21652] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3109.425626][T21647] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3109.425649][T21647] __sys_accept4+0x34e/0x6a0 [ 3109.425676][T21647] ? __ia32_sys_listen+0x80/0x80 [ 3109.425694][T21647] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3109.425711][T21647] ? fput_many+0x12c/0x1a0 [ 3109.425731][T21647] ? fput+0x1b/0x20 [ 3109.464130][T21647] ? ksys_write+0x1cf/0x290 [ 3109.468654][T21647] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3109.474144][T21647] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3109.479619][T21647] ? do_syscall_64+0x26/0x680 [ 3109.484306][T21647] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3109.486048][T21652] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3109.490380][T21647] ? do_syscall_64+0x26/0x680 [ 3109.490405][T21647] __x64_sys_accept4+0x97/0xf0 [ 3109.490423][T21647] do_syscall_64+0xfd/0x680 [ 3109.490446][T21647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3109.518677][T21647] RIP: 0033:0x459279 [ 3109.522605][T21647] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3109.542225][T21647] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 03:45:52 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xc00e000000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:52 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80}}], 0x58}, 0x0) [ 3109.550648][T21647] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 [ 3109.558636][T21647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3109.566619][T21647] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3109.574599][T21647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3109.582586][T21647] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 [ 3109.590114][T21656] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:53 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409d00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x125d) 03:45:53 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0}}], 0x58}, 0x0) 03:45:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:53 executing program 5 (fault-call:9 fault-nth:7): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3109.874520][T21669] input: syz1 as /devices/virtual/input/input122 [ 3109.904259][T21673] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x1269) 03:45:53 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}}], 0x58}, 0x0) [ 3109.996811][T21656] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3110.121860][T21685] FAULT_INJECTION: forcing a failure. [ 3110.121860][T21685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3110.135120][T21685] CPU: 0 PID: 21685 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3110.144340][T21685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3110.154503][T21685] Call Trace: [ 3110.157830][T21685] dump_stack+0x172/0x1f0 [ 3110.162294][T21685] should_fail.cold+0xa/0x15 [ 3110.166920][T21685] ? percpu_ref_tryget_live+0xef/0x290 [ 3110.172414][T21685] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3110.178244][T21685] ? __lock_acquire+0x537/0x4af0 [ 3110.183218][T21685] ? debug_smp_processor_id+0x3c/0x2b0 [ 3110.188697][T21685] should_fail_alloc_page+0x50/0x60 [ 3110.193906][T21685] __alloc_pages_nodemask+0x1a1/0x8d0 [ 3110.199291][T21685] ? find_held_lock+0x35/0x130 [ 3110.204091][T21685] ? __alloc_pages_slowpath+0x2900/0x2900 [ 3110.209835][T21685] ? lock_downgrade+0x920/0x920 [ 3110.214712][T21685] ? rwlock_bug.part.0+0x90/0x90 [ 3110.219794][T21685] cache_grow_begin+0x9d/0x650 [ 3110.224574][T21685] ? do_raw_spin_unlock+0x57/0x270 [ 3110.229714][T21685] ____cache_alloc_node+0x17a/0x1d0 [ 3110.235366][T21685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3110.241623][T21685] kmem_cache_alloc+0x1e8/0x6f0 [ 3110.241643][T21685] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 3110.241670][T21685] sk_prot_alloc+0x67/0x2e0 [ 3110.241686][T21685] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 3110.241704][T21685] sk_alloc+0x39/0xf70 [ 3110.261956][T21673] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3110.262745][T21685] tipc_sk_create+0xdb/0x2270 [ 3110.262763][T21685] ? __local_bh_enable_ip+0x15a/0x270 [ 3110.262787][T21685] ? tipc_sk_anc_data_recv.part.0+0x680/0x680 [ 3110.291092][T21685] ? lock_sock_nested+0x9a/0x120 [ 3110.296054][T21685] ? finish_wait+0x260/0x260 [ 3110.300667][T21685] ? __local_bh_enable_ip+0x15a/0x270 [ 3110.306161][T21685] tipc_accept+0x21a/0x1100 [ 3110.310693][T21685] ? ___might_sleep+0x163/0x280 [ 3110.315681][T21685] ? tipc_release+0x1830/0x1830 [ 3110.320637][T21685] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 3110.327595][T21685] ? aa_sk_perm+0x288/0x880 [ 3110.327612][T21685] ? __alloc_fd+0x44d/0x560 [ 3110.327634][T21685] ? apparmor_socket_accept+0xb6/0x160 [ 3110.327657][T21685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3110.343819][T21685] __sys_accept4+0x34e/0x6a0 [ 3110.343841][T21685] ? __ia32_sys_listen+0x80/0x80 [ 3110.343866][T21685] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3110.365955][T21685] ? fput_many+0x12c/0x1a0 [ 3110.365971][T21685] ? fput+0x1b/0x20 [ 3110.365983][T21685] ? ksys_write+0x1cf/0x290 [ 3110.366003][T21685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3110.366017][T21685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3110.366032][T21685] ? do_syscall_64+0x26/0x680 [ 3110.366056][T21685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3110.384229][T21685] ? do_syscall_64+0x26/0x680 [ 3110.384252][T21685] __x64_sys_accept4+0x97/0xf0 [ 3110.384270][T21685] do_syscall_64+0xfd/0x680 [ 3110.384293][T21685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3110.384311][T21685] RIP: 0033:0x459279 [ 3110.420504][T21685] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3110.420514][T21685] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3110.420529][T21685] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 [ 3110.420544][T21685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 03:45:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3110.462779][T21693] input: syz1 as /devices/virtual/input/input124 [ 3110.468381][T21685] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3110.468390][T21685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3110.468399][T21685] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 [ 3110.505406][ C0] net_ratelimit: 20 callbacks suppressed [ 3110.505460][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:45:53 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xf0ffffff00000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3110.518055][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.525217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3110.531423][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3110.559435][T21700] rds_sendmsg: 3 callbacks suppressed [ 3110.560794][T21700] atomic_op 000000000dff9630 conn xmit_atomic 0000000016d46f7e 03:45:53 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:53 executing program 5 (fault-call:9 fault-nth:8): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:45:54 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409e00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3110.609835][T21705] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:54 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000}}], 0x58}, 0x0) [ 3110.814338][T21713] FAULT_INJECTION: forcing a failure. [ 3110.814338][T21713] name failslab, interval 1, probability 0, space 0, times 0 [ 3110.829031][T21717] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x2405) 03:45:54 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3110.963358][T21721] atomic_op 0000000046d7bf4d conn xmit_atomic 0000000016d46f7e [ 3110.984272][T21713] CPU: 1 PID: 21713 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3110.993562][T21713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3111.003630][T21713] Call Trace: [ 3111.006953][T21713] dump_stack+0x172/0x1f0 [ 3111.011316][T21713] should_fail.cold+0xa/0x15 [ 3111.015937][T21713] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3111.021973][T21713] ? ___might_sleep+0x163/0x280 [ 3111.026846][T21713] __should_failslab+0x121/0x190 [ 3111.031803][T21713] should_failslab+0x9/0x14 [ 3111.036321][T21713] kmem_cache_alloc_trace+0x2ce/0x750 [ 3111.041720][T21713] ? sk_prot_alloc+0x67/0x2e0 [ 3111.046416][T21713] apparmor_sk_alloc_security+0x87/0x110 [ 3111.052074][T21713] security_sk_alloc+0x77/0xc0 [ 3111.056864][T21713] sk_prot_alloc+0xa5/0x2e0 [ 3111.062001][T21713] sk_alloc+0x39/0xf70 [ 3111.066102][T21713] tipc_sk_create+0xdb/0x2270 [ 3111.070805][T21713] ? __local_bh_enable_ip+0x15a/0x270 [ 3111.076198][T21713] ? tipc_sk_anc_data_recv.part.0+0x680/0x680 [ 3111.082288][T21713] ? lock_sock_nested+0x9a/0x120 [ 3111.087245][T21713] ? finish_wait+0x260/0x260 [ 3111.091950][T21713] ? __local_bh_enable_ip+0x15a/0x270 [ 3111.097356][T21713] tipc_accept+0x21a/0x1100 [ 3111.101884][T21713] ? ___might_sleep+0x163/0x280 [ 3111.106774][T21713] ? tipc_release+0x1830/0x1830 [ 3111.111653][T21713] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 3111.117399][T21713] ? aa_sk_perm+0x288/0x880 [ 3111.122313][T21713] ? __alloc_fd+0x44d/0x560 [ 3111.126845][T21713] ? apparmor_socket_accept+0xb6/0x160 [ 3111.133117][T21713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3111.139382][T21713] __sys_accept4+0x34e/0x6a0 [ 3111.143993][T21713] ? __ia32_sys_listen+0x80/0x80 [ 3111.148951][T21713] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3111.155214][T21713] ? fput_many+0x12c/0x1a0 [ 3111.159648][T21713] ? fput+0x1b/0x20 03:45:54 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d200100003409f00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3111.163471][T21713] ? ksys_write+0x1cf/0x290 [ 3111.167987][T21713] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3111.173552][T21713] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3111.179027][T21713] ? do_syscall_64+0x26/0x680 [ 3111.183727][T21713] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3111.183750][T21713] ? do_syscall_64+0x26/0x680 [ 3111.194723][T21713] __x64_sys_accept4+0x97/0xf0 [ 3111.199503][T21713] do_syscall_64+0xfd/0x680 [ 3111.204064][T21713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3111.210061][T21713] RIP: 0033:0x459279 [ 3111.213973][T21713] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3111.233705][T21713] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3111.242159][T21713] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 [ 3111.250435][T21713] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 03:45:54 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x58}, 0x0) 03:45:54 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xffffff7f00000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3111.258422][T21713] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3111.266499][T21713] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3111.274491][T21713] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 [ 3111.284279][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3111.290156][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3111.327580][T21728] input: syz1 as /devices/virtual/input/input126 [ 3111.363826][T21733] __nla_validate_parse: 14 callbacks suppressed [ 3111.363835][T21733] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:54 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3111.468482][T21741] atomic_op 0000000093006908 conn xmit_atomic 0000000016d46f7e 03:45:54 executing program 5 (fault-call:9 fault-nth:9): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:45:54 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a000000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:55 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}], 0x58}, 0x0) [ 3111.624140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3111.624179][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3111.630041][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3111.635896][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:45:55 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3111.721168][T21728] input: syz1 as /devices/virtual/input/input127 [ 3111.735682][T21733] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3111.746913][T21750] FAULT_INJECTION: forcing a failure. [ 3111.746913][T21750] name failslab, interval 1, probability 0, space 0, times 0 [ 3111.834249][T21750] CPU: 0 PID: 21750 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3111.843410][T21750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3111.853485][T21750] Call Trace: [ 3111.853543][T21750] dump_stack+0x172/0x1f0 [ 3111.853579][T21750] should_fail.cold+0xa/0x15 [ 3111.865890][T21750] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3111.871726][T21750] ? ___might_sleep+0x163/0x280 [ 3111.876599][T21750] __should_failslab+0x121/0x190 [ 3111.881562][T21750] should_failslab+0x9/0x14 [ 3111.886206][T21750] kmem_cache_alloc_node+0x261/0x700 [ 3111.891532][T21750] ? arch_stack_walk+0x97/0xf0 [ 3111.896325][T21750] __alloc_skb+0xd5/0x5e0 [ 3111.900704][T21750] ? skb_trim+0x190/0x190 [ 3111.905039][T21750] ? stack_trace_consume_entry+0x190/0x190 [ 3111.905060][T21750] ? kasan_slab_free+0xe/0x10 [ 3111.905073][T21750] ? kfree+0x106/0x2a0 [ 3111.905093][T21750] tipc_buf_acquire+0x2f/0x100 [ 3111.905109][T21750] tipc_msg_build+0x113/0x1240 [ 3111.905121][T21750] ? save_stack+0x5c/0x90 [ 3111.905133][T21750] ? save_stack+0x23/0x90 [ 3111.905145][T21750] ? __kasan_slab_free+0x102/0x150 [ 3111.905157][T21750] ? kasan_slab_free+0xe/0x10 [ 3111.905177][T21750] ? kmem_cache_free+0x86/0x320 [ 3111.905191][T21750] ? kfree_skbmem+0xa5/0x150 [ 3111.905203][T21750] ? kfree_skb+0xf0/0x390 [ 3111.905220][T21750] ? __sys_accept4+0x34e/0x6a0 [ 3111.905241][T21750] ? tipc_msg_assemble+0x540/0x540 [ 3111.924535][T21750] ? find_held_lock+0x35/0x130 [ 3111.924554][T21750] ? debug_check_no_obj_freed+0x211/0x444 [ 3111.924570][T21750] ? lockdep_init_map+0x1be/0x6d0 [ 3111.924593][T21750] __tipc_sendstream+0x631/0xe10 [ 3111.924622][T21750] ? tipc_connect+0x750/0x750 [ 3111.924638][T21750] ? kfree_skbmem+0xa5/0x150 [ 3111.924657][T21750] ? do_wait_intr_irq+0x2b0/0x2b0 [ 3112.006189][T21750] ? tsk_advance_rx_queue+0x18d/0x4b0 [ 3112.011589][T21750] ? rcu_read_lock_sched_held+0x110/0x130 [ 3112.017339][T21750] ? kfree_skb+0xf5/0x390 [ 3112.021810][T21750] tipc_accept+0xcc4/0x1100 [ 3112.026341][T21750] ? ___might_sleep+0x163/0x280 [ 3112.031224][T21750] ? tipc_release+0x1830/0x1830 [ 3112.031357][T21753] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3112.036118][T21750] ? apparmor_socket_accept+0xb6/0x160 [ 3112.036137][T21750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3112.036159][T21750] __sys_accept4+0x34e/0x6a0 [ 3112.036187][T21750] ? __ia32_sys_listen+0x80/0x80 [ 3112.036204][T21750] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3112.036218][T21750] ? fput_many+0x12c/0x1a0 [ 3112.036232][T21750] ? fput+0x1b/0x20 [ 3112.036245][T21750] ? ksys_write+0x1cf/0x290 [ 3112.036264][T21750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3112.036279][T21750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3112.036294][T21750] ? do_syscall_64+0x26/0x680 [ 3112.036320][T21750] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3112.066904][T21750] ? do_syscall_64+0x26/0x680 [ 3112.077579][T21750] __x64_sys_accept4+0x97/0xf0 [ 3112.077601][T21750] do_syscall_64+0xfd/0x680 [ 3112.077621][T21750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3112.077634][T21750] RIP: 0033:0x459279 03:45:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4b6b) [ 3112.077650][T21750] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3112.077658][T21750] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3112.077672][T21750] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 [ 3112.077681][T21750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3112.077697][T21750] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:45:55 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:55 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xffffffff00000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3112.151856][T21760] atomic_op 00000000d2479bc7 conn xmit_atomic 0000000016d46f7e [ 3112.159843][T21750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3112.159853][T21750] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 [ 3112.282418][T21768] input: syz1 as /devices/virtual/input/input128 03:45:55 executing program 5 (fault-call:9 fault-nth:10): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3112.353138][T21774] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:55 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00100}}], 0x58}, 0x0) 03:45:55 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a100000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3112.492048][T21768] input: syz1 as /devices/virtual/input/input129 03:45:55 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3112.601686][T21786] atomic_op 00000000896dd386 conn xmit_atomic 0000000016d46f7e 03:45:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4c00) [ 3112.682034][T21790] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:56 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x58}, 0x0) [ 3112.773394][T21774] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:45:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3112.869722][T21800] input: syz1 as /devices/virtual/input/input130 [ 3112.881230][T21801] atomic_op 000000004417f38e conn xmit_atomic 0000000016d46f7e [ 3112.932853][T21802] FAULT_INJECTION: forcing a failure. [ 3112.932853][T21802] name failslab, interval 1, probability 0, space 0, times 0 [ 3112.974739][T21790] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3112.992813][T21802] CPU: 1 PID: 21802 Comm: syz-executor.5 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3113.001981][T21802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3113.012149][T21802] Call Trace: [ 3113.015555][T21802] dump_stack+0x172/0x1f0 [ 3113.020022][T21802] should_fail.cold+0xa/0x15 [ 3113.024652][T21802] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 3113.030502][T21802] ? ___might_sleep+0x163/0x280 [ 3113.035383][T21802] __should_failslab+0x121/0x190 [ 3113.040346][T21802] should_failslab+0x9/0x14 [ 3113.044866][T21802] kmem_cache_alloc_node_trace+0x26d/0x720 [ 3113.050715][T21802] __kmalloc_node_track_caller+0x3d/0x70 [ 3113.056380][T21802] __kmalloc_reserve.isra.0+0x40/0xf0 [ 3113.061783][T21802] __alloc_skb+0x10b/0x5e0 [ 3113.066226][T21802] ? skb_trim+0x190/0x190 [ 3113.070569][T21802] ? stack_trace_consume_entry+0x190/0x190 [ 3113.070589][T21802] ? kasan_slab_free+0xe/0x10 [ 3113.070601][T21802] ? kfree+0x106/0x2a0 [ 3113.070624][T21802] tipc_buf_acquire+0x2f/0x100 [ 3113.090130][T21802] tipc_msg_build+0x113/0x1240 [ 3113.090146][T21802] ? save_stack+0x5c/0x90 [ 3113.090158][T21802] ? save_stack+0x23/0x90 [ 3113.090184][T21802] ? __kasan_slab_free+0x102/0x150 [ 3113.109049][T21802] ? kasan_slab_free+0xe/0x10 [ 3113.113791][T21802] ? kmem_cache_free+0x86/0x320 [ 3113.118684][T21802] ? kfree_skbmem+0xa5/0x150 03:45:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3113.118700][T21802] ? kfree_skb+0xf0/0x390 [ 3113.118717][T21802] ? __sys_accept4+0x34e/0x6a0 [ 3113.118743][T21802] ? tipc_msg_assemble+0x540/0x540 [ 3113.132749][T21802] ? find_held_lock+0x35/0x130 [ 3113.132767][T21802] ? debug_check_no_obj_freed+0x211/0x444 [ 3113.132788][T21802] ? lockdep_init_map+0x1be/0x6d0 [ 3113.153844][T21802] __tipc_sendstream+0x631/0xe10 [ 3113.158817][T21802] ? tipc_connect+0x750/0x750 [ 3113.163520][T21802] ? kfree_skbmem+0xa5/0x150 [ 3113.168165][T21802] ? do_wait_intr_irq+0x2b0/0x2b0 [ 3113.173218][T21802] ? tsk_advance_rx_queue+0x18d/0x4b0 [ 3113.178733][T21802] ? rcu_read_lock_sched_held+0x110/0x130 [ 3113.184508][T21802] ? kfree_skb+0xf5/0x390 [ 3113.188869][T21802] tipc_accept+0xcc4/0x1100 [ 3113.193398][T21802] ? ___might_sleep+0x163/0x280 [ 3113.198298][T21802] ? tipc_release+0x1830/0x1830 [ 3113.203176][T21802] ? apparmor_socket_accept+0xb6/0x160 [ 3113.208657][T21802] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3113.214936][T21802] __sys_accept4+0x34e/0x6a0 [ 3113.219549][T21802] ? __ia32_sys_listen+0x80/0x80 [ 3113.224504][T21802] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3113.230806][T21802] ? fput_many+0x12c/0x1a0 [ 3113.235247][T21802] ? fput+0x1b/0x20 [ 3113.239079][T21802] ? ksys_write+0x1cf/0x290 [ 3113.243815][T21802] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3113.249294][T21802] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3113.254778][T21802] ? do_syscall_64+0x26/0x680 [ 3113.259508][T21802] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3113.265591][T21802] ? do_syscall_64+0x26/0x680 [ 3113.270287][T21802] __x64_sys_accept4+0x97/0xf0 03:45:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:56 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a200000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3113.275072][T21802] do_syscall_64+0xfd/0x680 [ 3113.279598][T21802] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3113.285506][T21802] RIP: 0033:0x459279 [ 3113.289417][T21802] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3113.309239][T21802] RSP: 002b:00007faddd0e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 3113.318111][T21802] RAX: ffffffffffffffda RBX: 00007faddd0e7c90 RCX: 0000000000459279 03:45:56 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x58}, 0x0) 03:45:56 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0xfffffffffffff000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3113.326098][T21802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 3113.334100][T21802] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 3113.334110][T21802] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faddd0e86d4 [ 3113.334118][T21802] R13: 00000000004bf13f R14: 00000000004d04b0 R15: 0000000000000006 [ 3113.391155][T21800] input: syz1 as /devices/virtual/input/input131 03:45:56 executing program 5 (fault-call:9 fault-nth:11): r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3113.459875][T21823] atomic_op 00000000d8ffbe28 conn xmit_atomic 0000000016d46f7e [ 3113.501842][T21826] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:45:56 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:56 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}}], 0x58}, 0x0) 03:45:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4c01) [ 3113.734918][T21840] atomic_op 00000000a0c9f4fd conn xmit_atomic 0000000016d46f7e 03:45:57 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000000)) 03:45:57 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:45:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x58}, 0x0) [ 3113.832484][T21843] input: syz1 as /devices/virtual/input/input132 03:45:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3113.902198][T21826] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3113.939154][T21856] atomic_op 00000000949be871 conn xmit_atomic 0000000016d46f7e 03:45:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}], 0x58}, 0x0) [ 3114.006428][T21854] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3114.030708][T21843] input: syz1 as /devices/virtual/input/input133 [ 3114.248897][T21867] atomic_op 00000000f92240f4 conn xmit_atomic 0000000016d46f7e 03:45:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:57 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a300000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:57 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x4) 03:45:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5206) 03:45:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}], 0x58}, 0x0) 03:45:57 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) [ 3114.412898][T21879] validate_nla: 14 callbacks suppressed [ 3114.412908][T21879] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:57 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x6) [ 3114.474941][T21854] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3114.587819][T21887] input: syz1 as /devices/virtual/input/input134 03:45:58 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x0, 0x3, 0x81, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r3, 0x1}}, 0x18) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) accept$packet(r4, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000015c0)=0x14) r6 = add_key$keyring(&(0x7f0000001700)='keyring\x00', &(0x7f0000001740)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000001780)='syzkaller\x00', &(0x7f00000017c0)=@secondary='builtin_and_secondary_trusted\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xe, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@exit, @jmp={0x5, 0x1, 0xa, 0x0, 0xe, 0xffffffffffffffff, 0x1}, @generic={0x6, 0x2, 0x80000000, 0x0, 0x8000}, @call={0x85, 0x0, 0x0, 0x34}, @jmp={0x5, 0x5, 0x3, 0x8, 0x4, 0xfffffffffffffff0}, @jmp={0x5, 0x8, 0x3, 0xf, 0x7, 0x0, 0xfffffffffffffff0}, @ldst={0x2, 0x2, 0x0, 0xa, 0x0, 0x5e, 0x10}, @jmp={0x5, 0x8, 0xb, 0xb, 0x7, 0xfffffffffffffffc, 0x10}, @jmp={0x5, 0x9, 0x2, 0xf, 0x5, 0x8}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x2, [], r5, 0x17, r1, 0x8, &(0x7f0000001600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0x3, 0x2f, 0x8}, 0x10}, 0x70) 03:45:58 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x58}, 0x0) 03:45:58 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xc) [ 3114.858872][T21879] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3114.904411][T21887] input: syz1 as /devices/virtual/input/input135 03:45:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x58}, 0x0) [ 3114.971545][T21907] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:58 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58, 0x0}, 0x0) 03:45:58 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a400000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:58 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xf0) 03:45:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5402) 03:45:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x58}, 0x0) 03:45:58 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x2) [ 3115.326708][T21934] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3115.348861][T21907] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3115.403702][T21938] input: syz1 as /devices/virtual/input/input136 03:45:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}], 0x58}, 0x0) [ 3115.647772][T21952] rds_sendmsg: 4 callbacks suppressed [ 3115.647820][T21952] atomic_op 00000000306b199a conn xmit_atomic 0000000016d46f7e 03:45:59 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = getpgid(0xffffffffffffffff) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80) r4 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000140)='memory.low\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000180)={r3, r4, 0x9}) r5 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:59 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x600) 03:45:59 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x3) [ 3115.738036][T21934] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000}}], 0x58}, 0x0) [ 3115.784122][ C0] net_ratelimit: 18 callbacks suppressed [ 3115.784130][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.784151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.789861][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3115.795616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3115.811020][T21938] input: syz1 as /devices/virtual/input/input137 [ 3115.813034][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3115.825082][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:45:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000}}], 0x58}, 0x0) 03:45:59 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xc00) [ 3115.968530][T21970] atomic_op 00000000a3c9abf3 conn xmit_atomic 0000000016d46f7e [ 3115.974600][T21967] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:45:59 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a500000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:45:59 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x4) [ 3116.116997][T21975] atomic_op 00000000c7ecc0cb conn xmit_atomic 0000000016d46f7e 03:45:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5421) 03:45:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}}], 0x58}, 0x0) 03:45:59 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x2000) [ 3116.293163][T21989] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:45:59 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x8) [ 3116.450657][T21998] atomic_op 0000000003d5fc9e conn xmit_atomic 0000000016d46f7e [ 3116.473868][T21967] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3116.502520][T22001] input: syz1 as /devices/virtual/input/input138 [ 3116.522626][T21967] __nla_validate_parse: 9 callbacks suppressed [ 3116.522638][T21967] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3116.618945][T22001] input: syz1 as /devices/virtual/input/input139 [ 3116.642648][T21989] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3116.744113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3116.750046][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3116.756055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3116.761846][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:00 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x801, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:00 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}}], 0x58}, 0x0) 03:46:00 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfc) 03:46:00 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x3f00) 03:46:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5423) 03:46:00 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a600000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3116.958079][T22025] atomic_op 00000000af411185 conn xmit_atomic 0000000016d46f7e 03:46:00 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x300) 03:46:00 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000}}], 0x58}, 0x0) [ 3117.056620][T22030] input: syz1 as /devices/virtual/input/input140 [ 3117.069305][T22035] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:00 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x4000) [ 3117.128327][T22034] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3117.184489][T22030] input: syz1 as /devices/virtual/input/input141 [ 3117.273267][T22048] atomic_op 000000005a74d8ab conn xmit_atomic 0000000016d46f7e 03:46:00 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x2000) [ 3117.348564][T22048] atomic_op 00000000bb5122ea conn xmit_atomic 0000000016d46f7e 03:46:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5450) [ 3117.427280][T22035] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:00 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}}], 0x58}, 0x0) [ 3117.597161][T22034] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3117.623958][T22066] atomic_op 000000002814e054 conn xmit_atomic 0000000016d46f7e [ 3117.673829][T22067] input: syz1 as /devices/virtual/input/input142 03:46:01 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xf000) 03:46:01 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300158100f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x4000) 03:46:01 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}}], 0x58}, 0x0) 03:46:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x80fe) 03:46:01 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a700000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3117.912867][T22067] input: syz1 as /devices/virtual/input/input143 [ 3117.935403][T22085] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:01 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xf0ffff) [ 3118.013441][T22088] atomic_op 00000000320b43ff conn xmit_atomic 0000000016d46f7e 03:46:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xc0fe) 03:46:01 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000}}], 0x58}, 0x0) [ 3118.146872][T22097] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5451) 03:46:01 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x4000000) [ 3118.371997][T22109] input: syz1 as /devices/virtual/input/input144 [ 3118.385899][T22085] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3118.446208][T22110] atomic_op 00000000f3049e6f conn xmit_atomic 0000000016d46f7e [ 3118.475799][T22097] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:01 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfc00) [ 3118.504590][T22109] input: syz1 as /devices/virtual/input/input145 03:46:01 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000}}], 0x58}, 0x0) 03:46:02 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000000)) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:02 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x6000000) 03:46:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfe80) 03:46:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5452) 03:46:02 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a800000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:02 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000}}], 0x58}, 0x0) 03:46:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfec0) 03:46:02 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xc000000) [ 3119.068442][T22150] input: syz1 as /devices/virtual/input/input146 03:46:02 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}}], 0x58}, 0x0) 03:46:02 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xff00) 03:46:02 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x20000000) 03:46:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5460) 03:46:03 executing program 1: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:03 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x58}, 0x0) 03:46:03 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x1a000) [ 3119.654772][T22183] input: syz1 as /devices/virtual/input/input148 03:46:03 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340a900000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:03 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x3f000000) [ 3119.808858][T22183] input: syz1 as /devices/virtual/input/input149 03:46:03 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}], 0x58}, 0x0) 03:46:03 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x40000) [ 3119.901716][T22202] validate_nla: 13 callbacks suppressed [ 3119.901728][T22202] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:03 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}}], 0x58}, 0x0) 03:46:03 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x100000) 03:46:03 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x40000000) 03:46:03 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x400000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x40000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40024010}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES16=r4, @ANYBLOB="000026bd7000fedbdf25020000002400070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="f5544868", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0c0005000600000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x3) syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0x8, 0x0) 03:46:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5501) [ 3120.273900][T22202] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:03 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x58}, 0x0) [ 3120.413273][T22231] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:03 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x3ffdb8) [ 3120.511304][T22238] input: syz1 as /devices/virtual/input/input150 03:46:03 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xf5ffffff) 03:46:03 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340aa00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:03 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000000000}}], 0x58}, 0x0) [ 3120.723156][T22250] rds_sendmsg: 7 callbacks suppressed [ 3120.723215][T22250] atomic_op 00000000606ca271 conn xmit_atomic 0000000016d46f7e 03:46:04 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xa00100) 03:46:04 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x58}, 0x0) [ 3120.808593][T22256] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3120.871318][T22238] input: syz1 as /devices/virtual/input/input151 [ 3120.904148][ C0] net_ratelimit: 20 callbacks suppressed [ 3120.904156][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.915684][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3120.921549][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3120.925391][T22231] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3120.927374][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:04 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x1000000) 03:46:04 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xfeffffff) [ 3121.074746][T22272] atomic_op 00000000a9ff9531 conn xmit_atomic 0000000016d46f7e 03:46:04 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x2000000) [ 3121.153638][T22256] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:04 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)=0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x40000, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@xino_on='xino=on'}, {@xino_on='xino=on'}, {@xino_off='xino=off'}], [{@uid_gt={'uid>', r1}}]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000000)=""/91, 0x5b) 03:46:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5503) 03:46:04 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xfffff000) 03:46:04 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x3000000) 03:46:04 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}}], 0x58}, 0x0) 03:46:04 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340ab00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3121.477603][T22293] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3121.500561][T22292] atomic_op 00000000c1453279 conn xmit_atomic 0000000016d46f7e [ 3121.558056][T22293] __nla_validate_parse: 10 callbacks suppressed [ 3121.558068][T22293] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:05 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x8000000) [ 3121.621426][T22301] input: syz1 as /devices/virtual/input/input152 [ 3121.628004][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3121.628067][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:05 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}], 0x58}, 0x0) [ 3121.721769][T22304] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:05 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xffffff7f) [ 3121.784233][T22304] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:05 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x20000000) [ 3121.882787][T22315] atomic_op 0000000033f33049 conn xmit_atomic 0000000016d46f7e [ 3121.968948][T22293] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3122.024161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3122.024928][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3122.029995][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3122.035753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3122.047466][T22301] input: syz1 as /devices/virtual/input/input153 [ 3122.110163][T22293] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:05 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x40000000) 03:46:05 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}}], 0x58}, 0x0) [ 3122.279505][T22304] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3122.315687][T22304] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:05 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x200801, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000340)={0x60000001, 0x800, 0x1b}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x8000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') fgetxattr(r0, &(0x7f0000000380)=@random={'trusted.', '/dev/dlm-monitor\x00'}, &(0x7f00000003c0)=""/207, 0xcf) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x28, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000) r3 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x8}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:05 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xfffffff5) 03:46:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5504) 03:46:05 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xb8fd3f00) [ 3122.481554][T22339] atomic_op 00000000ff4b2675 conn xmit_atomic 0000000016d46f7e 03:46:05 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfc000000) [ 3122.584336][T22347] input: syz1 as /devices/virtual/input/input154 03:46:06 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340ac00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:06 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}}], 0x58}, 0x0) 03:46:06 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xfffffffe) [ 3122.657095][T22356] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:06 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfe800000) [ 3122.846578][T22366] atomic_op 0000000026c428b2 conn xmit_atomic 0000000016d46f7e [ 3122.856743][T22367] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:06 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}}], 0x58}, 0x0) 03:46:06 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x1000000000000) [ 3123.054903][T22353] input: syz1 as /devices/virtual/input/input155 03:46:06 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfec00000) [ 3123.117290][T22380] atomic_op 00000000a82032f8 conn xmit_atomic 0000000016d46f7e [ 3123.166135][T22356] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3123.284352][T22367] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:06 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000000)) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @empty, 0x6}, 0x1c) connect$ax25(r2, &(0x7f0000000140)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}, 0x48) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0x2) 03:46:06 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}}], 0x58}, 0x0) 03:46:06 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfeffffff) 03:46:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5505) 03:46:06 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xf0ffffffffffff) 03:46:06 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340ad00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3123.614977][T22404] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3123.623818][T22407] atomic_op 000000004fc694ce conn xmit_atomic 0000000016d46f7e [ 3123.633015][T22402] input: syz1 as /devices/virtual/input/input156 03:46:07 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xff000000) [ 3123.759789][T22417] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:07 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}}], 0x58}, 0x0) 03:46:07 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) [ 3123.977503][T22425] atomic_op 00000000c8efc9a3 conn xmit_atomic 0000000016d46f7e 03:46:07 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfffffffe) 03:46:07 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}}], 0x58}, 0x0) 03:46:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5506) [ 3124.264825][T22442] input: syz1 as /devices/virtual/input/input158 [ 3124.283537][T22444] atomic_op 00000000bd3b16a3 conn xmit_atomic 0000000016d46f7e 03:46:07 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x154, &(0x7f0000000080), 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:07 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x600000000000000) 03:46:07 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x100000000000) 03:46:07 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340ae00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:07 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}}], 0x58}, 0x0) [ 3124.395495][T22442] input: syz1 as /devices/virtual/input/input159 03:46:07 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x4000000000000) 03:46:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5507) 03:46:08 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xc00000000000000) 03:46:08 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000}}], 0x58}, 0x0) 03:46:08 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xa0010000000000) [ 3124.864371][T22476] input: syz1 as /devices/virtual/input/input160 03:46:08 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x2000000000000000) 03:46:08 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}}], 0x58}, 0x0) [ 3125.186265][T22476] input: syz1 as /devices/virtual/input/input161 03:46:08 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x200040) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3ff, 0x6, 0x1, 0x0, 0x0, 0x0, 0x6, 0xff, 0x2ed, 0x38, 0xe5, 0x70, 0x5, 0x20, 0x2, 0x40, 0x9, 0xfff}, [{0x60000000, 0x5, 0x1, 0x0, 0x1, 0x40, 0x0, 0x6b91}, {0x1, 0x5, 0xce7, 0x7ff, 0xff, 0x0, 0x9, 0x8000}], "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", [[], [], []]}, 0x1378) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x2bffc, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:08 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x100000000000000) 03:46:08 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340af00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:08 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}}], 0x58}, 0x0) 03:46:08 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5508) 03:46:08 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x3f00000000000000) [ 3125.429605][T22513] validate_nla: 10 callbacks suppressed [ 3125.429617][T22513] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:08 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x200000000000000) [ 3125.506006][T22515] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:08 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000}}], 0x58}, 0x0) [ 3125.630487][T22526] input: syz1 as /devices/virtual/input/input162 03:46:09 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x300000000000000) 03:46:09 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x4000000000000000) [ 3125.817176][T22537] rds_sendmsg: 4 callbacks suppressed [ 3125.817270][T22537] atomic_op 00000000a9eb73d9 conn xmit_atomic 0000000016d46f7e 03:46:09 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x800000000000000) [ 3125.866517][T22515] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:09 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}}], 0x58}, 0x0) [ 3125.958490][T22526] input: syz1 as /devices/virtual/input/input163 [ 3125.992188][T22513] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3126.109558][T22553] atomic_op 000000007b879335 conn xmit_atomic 0000000016d46f7e 03:46:09 executing program 1: r0 = socket$kcm(0x10, 0x800000007, 0x10) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x9, 0x420041) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x400080, 0x0) connect$l2tp(r2, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x4, 0x3, {0xa, 0x4e21, 0x4, @remote, 0x1bd3}}}, 0x3a) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x122, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0xa784, 0x1, 0x400}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xd) r4 = fcntl$dupfd(r0, 0x0, r0) sync() mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r4, 0x0) ioctl$SIOCAX25OPTRT(r3, 0x89e7, &(0x7f00000003c0)={@default, @bcast}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x9, 0x3}, 0x0, 0x0, &(0x7f00000004c0)={0x1, 0x9, 0x6, 0x6}, &(0x7f0000000500)=0xfe8a, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x3}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={r2, 0x10, &(0x7f0000000680)={&(0x7f0000000400)=""/47, 0x2f, r5}}, 0x10) getsockopt$inet6_dccp_int(r4, 0x21, 0x1, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000180)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:09 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x8000000000000000) [ 3126.184141][ C0] net_ratelimit: 18 callbacks suppressed [ 3126.184150][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.184189][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.189878][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3126.195867][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3126.213108][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:46:09 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x2000000000000000) 03:46:09 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b000000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:09 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x550b) 03:46:09 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000}}], 0x58}, 0x0) [ 3126.440593][T22574] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3126.475996][T22575] atomic_op 00000000c0817ec1 conn xmit_atomic 0000000016d46f7e 03:46:09 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xf5ffffff00000000) 03:46:09 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}}], 0x58}, 0x0) [ 3126.571180][T22581] input: syz1 as /devices/virtual/input/input164 03:46:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x4000000000000000) 03:46:10 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) mount$9p_virtio(&(0x7f0000000000)='TIPC\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x60004, &(0x7f00000004c0)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@cache_mmap='cache=mmap'}, {@cache_fscache='cache=fscache'}, {@fscache='fscache'}, {@msize={'msize'}}, {@access_any='access=any'}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@uid_lt={'uid<', r4}}, {@measure='measure'}, {@euid_lt={'euid<', r5}}, {@appraise='appraise'}]}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3126.743611][T22584] input: syz1 as /devices/virtual/input/input165 [ 3126.777726][T22592] atomic_op 00000000be99c13a conn xmit_atomic 0000000016d46f7e 03:46:10 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}}], 0x58}, 0x0) [ 3126.845876][T22574] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3126.884785][T22574] __nla_validate_parse: 9 callbacks suppressed 03:46:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x550f) [ 3126.884797][T22574] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:10 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xfeffffff00000000) 03:46:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xb8fd3f0000000000) [ 3127.039510][T22601] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3127.053165][T22610] atomic_op 000000004369e277 conn xmit_atomic 0000000016d46f7e [ 3127.127413][T22611] input: syz1 as /devices/virtual/input/input166 [ 3127.142059][T22601] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3127.154129][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.160022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3127.165913][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3127.171689][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfc00000000000000) 03:46:10 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b100000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:10 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000}}], 0x58}, 0x0) 03:46:10 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xffffff7f00000000) [ 3127.390258][T22630] atomic_op 00000000c8e0c24a conn xmit_atomic 0000000016d46f7e [ 3127.402097][T22601] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfe80000000000000) 03:46:10 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5510) [ 3127.456774][T22601] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3127.483912][T22636] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:10 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000}}], 0x58}, 0x0) [ 3127.537838][T22636] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3127.658783][T22646] input: syz1 as /devices/virtual/input/input168 [ 3127.685825][T22652] atomic_op 00000000259d7fb0 conn xmit_atomic 0000000016d46f7e [ 3127.864118][ C0] protocol 88fb is buggy, dev hsr_slave_0 03:46:11 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x10000307}, 0x3) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0xe200, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000040)=0x6) lseek(r0, 0x0, 0x4) 03:46:11 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xfffffffffffff000) 03:46:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfec0000000000000) 03:46:11 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000}}], 0x58}, 0x0) [ 3127.907631][T22636] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3127.918070][T22636] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3127.987720][T22646] input: syz1 as /devices/virtual/input/input169 [ 3127.989928][T22665] atomic_op 00000000babfe341 conn xmit_atomic 0000000016d46f7e 03:46:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xfeffffff00000000) 03:46:11 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}}], 0x58}, 0x0) [ 3128.270128][T22683] atomic_op 00000000f617cad6 conn xmit_atomic 0000000016d46f7e 03:46:11 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b200000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:11 executing program 5: r0 = socket(0x1e, 0x805, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffccc, 0x20004000}, 0x4000000) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0xcfb) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x0, 0x2) write$P9_RSYMLINK(r3, &(0x7f00000001c0)={0x14, 0x11, 0x2, {0x8, 0x3, 0x8}}, 0x14) r4 = accept4(r1, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000200)={0x400}, 0x8, 0x80000) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x9, 0xb, 0x400, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0x9}, [@typed={0x4, 0x27}]}, 0x18}}, 0x20000000) 03:46:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xff00000000000000) 03:46:11 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4002, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/14) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) 03:46:11 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x6364) 03:46:11 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000}}], 0x58}, 0x0) [ 3128.453922][T22692] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3128.521144][T22695] input: syz1 as /devices/virtual/input/input170 [ 3128.550616][T22701] atomic_op 000000005c94a707 conn xmit_atomic 0000000016d46f7e 03:46:11 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0xffffffff00000000) [ 3128.566482][T22705] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:12 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}}], 0x58}, 0x0) [ 3128.719574][T22692] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3128.753403][T22695] input: syz1 as /devices/virtual/input/input171 03:46:12 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) [ 3128.879734][T22705] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:12 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0xf}, 0x0) 03:46:12 executing program 1: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x7, @local, 0x1000}, @in={0x2, 0x4e24, @rand_addr=0xfff}, @in6={0xa, 0x4e22, 0x33be, @dev={0xfe, 0x80, [], 0xd}, 0x1}, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, [], 0x22}, 0xaa}], 0x64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000040000000000000000003f46bc1e00"/104], 0x68) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x208, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:12 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x8904) 03:46:12 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b300000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3129.165513][T22734] input: syz1 as /devices/virtual/input/input172 03:46:12 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0xa5, @multicast2, 0x4e23, 0x0, 'fo\x00', 0x10, 0x1, 0x24}, 0x2c) r1 = socket(0x1e, 0x5, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:12 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:12 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x24}, 0x0) [ 3129.335326][T22744] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3129.383580][T22734] input: syz1 as /devices/virtual/input/input173 03:46:12 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = msgget(0x2, 0x42) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000000)=""/3) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x4) 03:46:12 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x57}, 0x0) 03:46:12 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000010000000000000000000000000000000000000000000000000000000000091000000000000000000000000000000000000000000000000000000000000000000e42dfcebb049ac3b984e11392b3cb3f4d1f9f21af11b87b56300961a96ee10"], 0x58}, 0x0) 03:46:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x890c) 03:46:13 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:13 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x68}, 0x0) [ 3129.771740][T22773] input: syz1 as /devices/virtual/input/input174 03:46:13 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0xfffffffffffffffc, @multicast1}, 0x10, 0x0, 0xffffffffffffffa9, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0xb9}, 0x0) 03:46:13 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x5000}, 0x0) 03:46:13 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b400000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:13 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x5, 0x4, 0xff, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x100000000, 0x30, 0xda77, 0x4}, &(0x7f0000000200)=0x18) listen(r1, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:13 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000600000000140100000200000000000000000000000000000000000000000000000000000000000000008851f5d77dd0e0d3b7ac00"/88], 0x58}, 0x0) 03:46:13 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) r1 = fcntl$getown(r0, 0x9) ptrace$pokeuser(0x6, r1, 0x8, 0x3) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000440)={0x4, 0x2, 0xbd55, 0x8, 0x5, 0x4, 0x93}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000004c0)={0x6, 0x6, @name="9284fd0dfd731081ba158c537803696d3f0fb6e3201a499372fb6fe4813d6049"}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x206b65dc41a147b4, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x800) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') write$UHID_INPUT2(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x99) timer_create(0x2, &(0x7f00000002c0)={0x0, 0x9, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r5, 0x1, &(0x7f00000003c0)={{r6, r7+10000000}, {r8, r9+30000000}}, &(0x7f0000000400)) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x80000002, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000240)={0x10000, 0x80000001, 0x9, 0x1, 0xffffffffffffffff}, 0x14) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0)='SEG6\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000600)={0x0, 0x1, 0x6, 0x2}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000680)={r11, 0x8}, &(0x7f00000006c0)=0x8) 03:46:13 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x20000318}, 0x0) [ 3130.226735][T22773] input: syz1 as /devices/virtual/input/input175 03:46:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x8912) 03:46:13 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3130.486594][T22817] input: syz1 as /devices/virtual/input/input176 03:46:13 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x2}, 0x0) [ 3130.668465][T22811] validate_nla: 10 callbacks suppressed [ 3130.668477][T22811] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$FUSE_POLL(r1, &(0x7f0000000100)={0x18, 0x0, 0x7, {0xcba1}}, 0x18) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f00000000c0)=0x100000001) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000002b00000000000000000000003ef093807354dbb0f7e5eba44d42106c32012d8f328ab925cfad3a6cc4b8577d45de5eabadef3fb3db3b615bdcfb680d2153e4d97f4a9f7af53800b27c6530746ba401005005b21712e67076e50f97d54f3115e8ee8316833387b245e64dd346a3a99d247627f5080600000000000000d0de4129bce7f6c672e2262e79c6ca64d01f2415b2cda9be092167aedfb1445d05fa29"], 0x58}, 0x0) 03:46:14 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x3}, 0x0) [ 3130.898990][T22807] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:14 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b500000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3131.054655][T22817] input: syz1 as /devices/virtual/input/input177 [ 3131.066546][T22838] rds_sendmsg: 2 callbacks suppressed [ 3131.066594][T22838] atomic_op 00000000e7bc643c conn xmit_atomic 0000000016d46f7e [ 3131.121412][T22846] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:14 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4}, 0x0) 03:46:14 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0xff, r3, 0x1, 0x7f, 0x6, @dev={[], 0x29}}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_targets\x00') mkdirat$cgroup(r4, &(0x7f0000000280)='syz1\x00', 0x1ff) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) shmget(0x2, 0x4000, 0x1040, &(0x7f0000ff9000/0x4000)=nil) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3131.304144][ C0] net_ratelimit: 19 callbacks suppressed [ 3131.304153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.310095][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.321712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3131.327578][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3131.384722][T22852] atomic_op 00000000424e5eb2 conn xmit_atomic 0000000016d46f7e 03:46:14 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x220001, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:14 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3131.499878][T22846] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x8914) [ 3131.685013][T22869] input: syz1 as /devices/virtual/input/input178 [ 3131.712438][T22872] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:15 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x9, 0x1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10002000}, 0xc, &(0x7f0000001640)={&(0x7f00000014c0)={0x170, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4284fe63, @loopback, 0x101}}}}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x627819fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x88, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48c6581c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffe16e}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8004}, 0xc044) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:15 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x5}, 0x0) 03:46:15 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") getsockopt(r1, 0x3, 0x100, &(0x7f0000000080)=""/27, &(0x7f0000000180)=0x1b) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:15 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b600000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3132.014721][T22885] atomic_op 00000000e4766ee1 conn xmit_atomic 0000000016d46f7e [ 3132.024118][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.030591][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:15 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6}, 0x0) [ 3132.078391][T22872] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3132.112488][T22872] __nla_validate_parse: 10 callbacks suppressed [ 3132.112499][T22872] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:15 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x10001, 0x4) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3132.197230][T22892] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3132.260505][T22892] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3132.276077][T22895] atomic_op 000000005a74d8ab conn xmit_atomic 0000000016d46f7e 03:46:15 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7}, 0x0) [ 3132.424121][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.424170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3132.429939][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3132.435810][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:46:15 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x6, 0x4, 0x5, 0x100, 0x2027fb00, @local}, 0x10) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0xe35e, 0x400, 0xeb6, 0x2, 0x0, 0x80000000, 0x3ff, 0x2, 0x2, 0xfffffffffffffff8, 0x3, 0x9}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) 03:46:15 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x4, 0x4, {0xa, 0x4e21, 0x200, @empty, 0x20}}}, 0x54, 0x0, 0x0, 0x0, 0xfffffffffffffd6e}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:15 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0xcd) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3132.529908][T22869] input: syz1 as /devices/virtual/input/input179 [ 3132.588596][T22910] atomic_op 00000000f89a7dff conn xmit_atomic 0000000016d46f7e [ 3132.673212][T22916] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:16 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x8}, 0x0) 03:46:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x8933) 03:46:16 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x2) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000000c0)={0x0, 0x57c45b4a, 0x8, 0x4, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3132.752228][T22916] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3132.777810][T22892] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3132.791160][T22892] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3132.878457][T22926] atomic_op 000000000df8d9ee conn xmit_atomic 0000000016d46f7e [ 3132.963492][T22934] input: syz1 as /devices/virtual/input/input180 03:46:16 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r1, &(0x7f00000000c0)="3ded6b1594653c9660054a898a864478184978ce", &(0x7f0000000340)=""/4096}, 0x18) 03:46:16 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b700000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3133.069881][T22916] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3133.106233][T22916] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:16 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x48}, 0x0) [ 3133.207243][T22934] input: syz1 as /devices/virtual/input/input181 03:46:16 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3133.294251][T22950] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:16 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x60081) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3133.357186][T22951] atomic_op 00000000555f67a4 conn xmit_atomic 0000000016d46f7e 03:46:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xae01) 03:46:16 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4c}, 0x0) [ 3133.520568][T22962] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3133.548976][T22960] input: syz1 as /devices/virtual/input/input182 03:46:16 executing program 5: r0 = socket(0x1b, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:16 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000200)={0x0, @ctrl}) [ 3133.645864][T22970] atomic_op 000000004271e169 conn xmit_atomic 0000000016d46f7e 03:46:17 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x60}, 0x0) [ 3133.777830][T22950] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3133.869382][T22962] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3133.898544][T22960] input: syz1 as /devices/virtual/input/input183 03:46:17 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x800, 0x80100) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000000c0)={0x80000000000000, 0x7000, 0x7f, 0x2, 0x3}) [ 3133.991264][T22987] atomic_op 000000007538dd3e conn xmit_atomic 0000000016d46f7e 03:46:17 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x68}, 0x0) 03:46:17 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b800000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:17 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, "51d99a"}, 0x4) 03:46:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xae41) 03:46:17 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) fspick(r1, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)={0xfff, 0x0, 0x9, 0x0, 0x0, [{r0, 0x0, 0x9}, {r2, 0x0, 0x5}, {r2, 0x0, 0x5}, {r1, 0x0, 0x4}, {r0, 0x0, 0x7fffffff}, {r2, 0x0, 0x5}, {r2, 0x0, 0x3}, {r2, 0x0, 0x8}, {r0, 0x0, 0x3}]}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3134.275238][T22999] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3134.292708][T22996] atomic_op 0000000068417287 conn xmit_atomic 0000000016d46f7e 03:46:17 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6c}, 0x0) [ 3134.392302][T23004] input: syz1 as /devices/virtual/input/input184 03:46:17 executing program 3: sync() r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:17 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x74}, 0x0) 03:46:18 executing program 5: r0 = socket(0x19, 0x803, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7a}, 0x0) [ 3134.800837][T23004] input: syz1 as /devices/virtual/input/input185 03:46:18 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340b900000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:18 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000100)=0x9) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000340)=""/4096, 0x1000}, &(0x7f0000000040), 0x48}, 0x20) 03:46:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfc}, 0x0) 03:46:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xae60) 03:46:18 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x10045, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:18 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfe58, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf4, 0x0, 0x401, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1000}, 0x0, 0x7c, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x208000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{}, {}]}) write$P9_RLINK(r1, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x333) socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x200000, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3135.253892][T23053] input: syz1 as /devices/virtual/input/input186 03:46:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x300}, 0x0) 03:46:18 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$3(0x3) r2 = accept(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000040)=0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0xc}, 0x1}}, 0xdde5, 0x1, 0x6, 0x7, 0x4}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x1, @loopback, 0x5}}}, 0x84) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:18 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x500}, 0x0) [ 3135.553245][T23053] input: syz1 as /devices/virtual/input/input187 03:46:18 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340ba00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:19 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xffffffffffffc1dc, 0x80000) r4 = open(&(0x7f0000000200)='./file0\x00', 0x8000, 0x100) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x3, r4}) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000180)=0x4) accept4(r1, 0x0, 0x0, 0x0) 03:46:19 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0xfb, &(0x7f0000000200)="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"}) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="58000000000000001401000002000064000000000000000000df6f00000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000070ab2ae38257dc61d1ab0ce6fcc9acb61711bf3ee53ccf13c766357ff4038def573ba9b728d6a12ddfa03a648874c6be26f4ff8cc1f97bb844116ca8c18b377c45df5ccf520aa1ae4d1cee8d670545038ec0a05b9051c72f9a2a78fec97dae843ca75de1ca31b492db6e674406f150e5551574639a84410feeb03dbdd16e2d5cdf76c1d747163552064e6f81b7a995f4cf7dfa2b5f81856b287e20724186a232e4"], 0x58}, 0x0) [ 3135.763269][T23084] validate_nla: 12 callbacks suppressed [ 3135.763280][T23084] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:19 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x600}, 0x0) 03:46:19 executing program 1: r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x6d, &(0x7f0000000000), 0x1, 0x0, 0x1bf}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) bind$alg(r1, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cipher_null-generic)\x00'}, 0x58) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x20}, 0x28, 0x3) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000200)={0xf, 0x8, 0xfa00, {r4, 0xb}}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x10000, 0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000400)=0xa0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000300)={0xd000, 0x1, 0x9, 0x1, 0x4aa1}) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000440)={0x6, @pix={0x5, 0x0, 0x66777675, 0x7, 0x10001, 0x8, 0x7, 0x7a, 0x0, 0x2}}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}, 0x0) 03:46:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xae80) 03:46:19 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) r1 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5880000000000000140100000200000000001200000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000a05e8c895ef6238ff06f8b4e9d4a00"/102], 0x58}, 0x0) 03:46:19 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) fchmod(r0, 0x84) r2 = openat$dlm_control(0xffffffffffffff9c, 0xfffffffffffffffd, 0x80000, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000001c0)={0xfffffffffffffff9}) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x18e, 0x0, 0x74f50dabc9e3a4d3}, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000180)=0x4) [ 3136.064223][T23084] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:19 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x700}, 0x0) [ 3136.154265][T23106] input: syz1 as /devices/virtual/input/input188 03:46:19 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x2}, 0x1) 03:46:19 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340bb00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3136.366345][T23117] rds_sendmsg: 7 callbacks suppressed [ 3136.366396][T23117] atomic_op 000000009359e555 conn xmit_atomic 0000000016d46f7e 03:46:19 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000002c0)='syz1\x00') r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x45d, 0x8, 0x200, 0x4, 0x9, 0x4, 0xfffffffffffffffc, 0x523, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000140)={r5, 0x2}, &(0x7f0000000200)=0x8) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:19 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5800000000deff00140100000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c36b9a729224fe4b069755dbc8f3455a53e073d8bf8cb286ae454f752e1ef88105d5829d961ccc0200490a3acddcfe766dbe023f154cd1d8b1899753935a25fcbb9497d31c891c8c6ba3c1616a6b3feaa1c92c7c49bec9c28379465cf53a5452a8163b88cd48f341335eec0adb10a452daf1be4c5491bf"], 0x58}, 0x0) listen(r0, 0xfff) [ 3136.429115][T23106] input: syz1 as /devices/virtual/input/input189 [ 3136.446545][T23124] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:19 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x2000}, 0x0) [ 3136.566555][T23133] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3136.584125][ C1] net_ratelimit: 19 callbacks suppressed [ 3136.584134][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.584143][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.584207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3136.589926][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3136.613188][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3136.619025][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:46:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xff02) [ 3136.729953][T23139] atomic_op 00000000999f7a21 conn xmit_atomic 0000000016d46f7e 03:46:20 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="58000000000000001401000002e60000000000000000e5000000000000000000070000000000000000000000000000000000000016c273aeae0000000000000000e3ff0000000000665248f5337bb5c8b887c2c3000000000065de"], 0x58}, 0x0) [ 3136.778291][T23124] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:20 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4000}, 0x0) [ 3136.863311][T23133] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3136.881491][T23145] input: syz1 as /devices/virtual/input/input190 03:46:20 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3137.058084][T23154] atomic_op 00000000a4916167 conn xmit_atomic 0000000016d46f7e 03:46:20 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) accept4$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x10, 0x80800) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:20 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340bc00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:20 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:20 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000001, 0x40000000000000, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x40000080, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="58000000006de5f59a0100000200000000000800ffff000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"], 0x58}, 0x0) [ 3137.190817][T23145] input: syz1 as /devices/virtual/input/input191 03:46:20 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4800}, 0x0) [ 3137.339723][T23172] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3137.377884][T23172] __nla_validate_parse: 13 callbacks suppressed 03:46:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x400454ca) [ 3137.377895][T23172] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3137.395727][T23175] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 3137.486665][T23184] atomic_op 00000000269845e1 conn xmit_atomic 0000000016d46f7e [ 3137.491383][T23173] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3137.512713][T23185] input: syz1 as /devices/virtual/input/input192 [ 3137.520472][T23173] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3137.544157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.549990][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.555885][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3137.561686][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3137.585249][T23187] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? 03:46:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4c00}, 0x0) 03:46:21 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0xc000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x9, 0x1, [0x7]}, &(0x7f0000000240)=0xa) r2 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3137.772788][T23188] input: syz1 as /devices/virtual/input/input193 [ 3137.807374][T23195] atomic_op 00000000e421b4d3 conn xmit_atomic 0000000016d46f7e [ 3137.835063][T23172] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6000}, 0x0) [ 3137.877839][T23172] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3137.917406][T23173] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:21 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x8000000, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="5800000000000000140100000200000000000000000000f7591fd0f5959dbd90adb4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005461455376324a0d6730e21acfa73ec98bd3a8be6371851865e7f5665c69eed98fd59bf943d25abed9846666845ce265a1931040bf9ad316cdcb16a86ea31ba5d39764418a0000000000"], 0xfd55}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='selfmd5sum\x00') r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x7f, @local, 0x4e23, 0x4, 'lblcr\x00', 0x10, 0x8, 0x14b0}, {@multicast1, 0x4e24, 0x12000, 0x6, 0x1, 0x40}}, 0x44) [ 3137.946896][T23173] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x400454d0) [ 3138.060502][T23206] atomic_op 00000000490f4b20 conn xmit_atomic 0000000016d46f7e 03:46:21 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340bd00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:21 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x410400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000640)={0x0, 0x6, 0x29ae}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000002c0)={r1, 0xab}, 0x8) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r3 = socket(0x1f, 0x7, 0xfffffffffffffffb) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r3, 0x0) r5 = socket$inet6(0xa, 0x80006, 0x44000000000) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000180)=0x4) ioctl(r5, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x203d, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0x7, 0x2, &(0x7f0000000540)=[{&(0x7f0000000400)='!', 0x1, 0x7}, {&(0x7f0000000440)="3c4241f1d9bd575cc965b32347da7cca6dd48db4a91bdec7691e34e0cb22eaf87f984715cf3886b73fbfa8d8cc0a6b781f0d8d59a33b943186a9e05541e328adec68dc621fd37d2aa4b1d338beac3ad37be37aa11998bf6f74c4c3aa528e548e4756d9ac8afb339e30d583fcb0a9139268415407a93ac4ebaa8085aae00e0c5c18cd258f8bc8c0732df45fae30d50b7b9ce43feaac0a557a55d062a6cd3ba28a8a756ca7740d6ddf1acfe92b6f96cd027285b15c1453f3265a35cb6d3c3138f2192523cefd138b06e5c9db16a60b453df8d70840e4e6ad3910e308fd9608ba3eec0f2d", 0xe3, 0x8}], 0x80000, &(0x7f0000000580)={[{@dots='dots'}, {@dots='dots'}, {@dots='dots'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@pcr={'pcr', 0x3d, 0x23}}, {@fsname={'fsname', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fsname={'fsname', 0x3d, ']'}}]}) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000300)='/dev/full\x00', 0xa) sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f00000001c0)=0x96, 0x4) accept4(r3, 0x0, 0x0, 0x201000000000001) 03:46:21 executing program 1: socket$kcm(0x10, 0x5, 0x10) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x5c, 0x1000, 0x7, 0x4, 0x9, 0xee, "cb0cb28cc326f8dd5e2e517657754db14a976e95b8a153aa7c7007e49e4b887fe179b524edd67a36a143b1acc898fbc04b807ca72b32510ca1b4c48af1f453c7df7f0281b34b45b538dd009e34268a474142da2f775534b3a44789a0"}, 0x174) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 03:46:21 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f00000000c0)='net/bnep\x00') 03:46:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6800}, 0x0) [ 3138.270834][T23214] input: syz1 as /devices/virtual/input/input194 [ 3138.392857][T23229] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3138.409709][T23230] atomic_op 00000000e6134b40 conn xmit_atomic 0000000016d46f7e 03:46:21 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) bind$unix(r1, &(0x7f000094cff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write(r0, &(0x7f0000000140)="eecafc993c4115118e24fa19e58cbaeebf27305118e8ceb4c1bda57af4ec7de55dab136734ffc8", 0x27) socket$inet(0x2, 0x1, 0x8) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x58}, 0x0) accept4$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e, 0x800) 03:46:21 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6c00}, 0x0) 03:46:21 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r2 = getpid() move_pages(r2, 0x1ffffffffffffeb4, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil], 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r3, 0x501, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x82d}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3138.586916][T23214] input: syz1 as /devices/virtual/input/input195 [ 3138.670399][T23245] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40045564) [ 3138.715386][T23229] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3138.745296][T23252] atomic_op 000000007f016576 conn xmit_atomic 0000000016d46f7e 03:46:22 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000080)={0x3}) 03:46:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7400}, 0x0) 03:46:22 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x4, 0x400c8e301) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0)={0x2, 0x4}, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0xfffffffffffffd11}, 0x0) [ 3139.022833][T23267] input: syz1 as /devices/virtual/input/input196 03:46:22 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340be00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3139.099658][T23274] atomic_op 000000002702fefa conn xmit_atomic 0000000016d46f7e 03:46:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7a00}, 0x0) 03:46:22 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) tgkill(r1, r2, 0x7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x100) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000200)={0xc, {0x79, 0x4, 0x3, 0x7fffffff}}) bind$rds(r0, &(0x7f0000000080)={0x2, 0x200000000000, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="5800000000560000140100000200000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000256edea1ff5827b1da088803ce1782212b6a66ad27aed48a9bc87f568e554e587ba2e2a921cfe395ed040085046895d46dbebc6519034885ccd4908ab6781888459ccce3beba470288e30054757760439a5186f5e50d7559edd5036b55c9bb2b90"], 0x58}, 0x0) bind$rds(r3, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000000c0)=0x7, 0x4) [ 3139.211019][T23267] input: syz1 as /devices/virtual/input/input197 03:46:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40045565) [ 3139.285220][T23285] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:22 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000080)=0x54) [ 3139.445625][T23294] atomic_op 00000000e552776c conn xmit_atomic 0000000016d46f7e 03:46:22 executing program 3: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x6, &(0x7f0000001440)=[{&(0x7f0000000340)="4e9ef8689f791dd6d42de088b3f0137fde9d0864a46b0a5eb74a4aa266aac79753ec2093777d7d67d9788f00dfa251ded3b468de3715f9489e4f0d96eac337fa1f037de8efe9f80fb77b53c18a133e0432ef7678e47f884531bd2a6be5cf7280b5236020eefbfd7449f4c6615e9fa83f86d31e42474cf2449ee0dbf8f28ca3f385948f02f561f234ea1606e21c59eb7717f7f3db314411ca7fdd7fce1ccac2f373fe2e15ca4e743ea1a2054bb68dac3ee2c29453872a1759e60533e3527afbdcd6ba0a090503f6d92b3eb63eb145296a4b9fdb2ce8d9e077c7c90b19de5b3b43fcf4d9ef42b75aae40ec1f71a867d4aadd58867951549ef0e83ed72baed6abb5946e63dc8cae6e4f8f48de4bf4fd7dad92cb50015c6ba4941383569c5152c184db0ce6dc9160bccd01b8a6d936920692bcc2cbc2d9b9bf7c41e20093ced32372093d1a1106e6e9789e2da45cef666619a441d2617edde65194bce3e995f7d2fa6a4bf3befeb15418cfe83642f32b6c3f6373ddb50463c2545de5cdc121e7a3ef410fb61e96bcc35288393162eed79a184d7369936e4a2aae607b4f013851d61931ea617d77f98f7248d75b1a42d41003d810ffcb366cbb29538d54c85a69603ecad86bf7b5c20f90e376a08e6ff4c5db29ea96cfe7887efe05b0ddf699a427c67ce64c1ee3d8740cbfce9dbc4d5b667e8023f9d1ae1e33ba98fc8e9474ced0962fc0f0f6d2bd9669ae6cb4d4697513446da5e832db6725ea40da0586c4ac529c0421827c63261ec6bafb2a59cd5990444aa59287d4d1394caf012b8e3bbc6f853640f8720b5bb3cd8039243ffe4b48cccf92f7c3794502b26c8503924186a3b4b79ca972db9bb3bb7f744496d9a976b09773af9729080f0b63198b9cedbbc2bf2b8406543381cb9cccede5ac6372c676a3a9eeee34900462a196d01c2625d2b91bcb5b587c665ae229b43cda1576560808a76245fcff3fc12f724240e9b554c5263830edc734e0051e1aefb36702a8e711e81bb344a707ae70be6f921b12e84a70b8ed8c31d9bd69150c92f94f851c3ebe70c17e62f4a3f4e93e9cb9870f4fd97caf39c31f235cd55d9d484421210cb358c4137821ea167d6fe250064f6552eaff77aeee36d2405128f619b6cced179e3ce04d6b55449de68fc61408b5099d8c382394d53e2e7f7938cf72d4f610664ddebdba49c7aa4b9c0c5865d316a900dd3b336f8471e79491fa4ad0f88fbf33367f089e06de7f30c63ed61196e99b2e52bd7e5040f8e6d611c40af3c12ff34d7f81f646e00ef2fe0c7ecc80b47f87e5d0b4bebaf4d51d08a38f46f2bf828c3f76fbee2cd93663b7ee9e0c9dd2d1e771c154fc6660f751180eaa66b5366c55f4b73804ee345189883deaebdb109a0bf2e9f7c807b17008fa8fe7a2215d69b62b35beda4b5bd65c871ee4650eca4b269e4d281fee3978f266eccb4458de8d971327e97b7a702fdb4db062b266a2ae825fd78bc4bcc93a307af9f30f70c0fb14407cd596479577b4d0460206ecb25af4b4948488ff3043c9505cb42c8362641b871db032f443f372e91776c764e6a2c6a6950ecfb48c075d13f909c02dcf4929ee6e8223654aeb97d2d46b00d194a5e25b38570285022cfc45eac2682fdfef7ae078f85005241231328612ef982f7e9f7984bf7969513bc1c07f46a30c7e00c854b562ac823339d8d0742893d834452541f613a4600875e91e3763e2a3767b4898093403948f69065c7b283502a2f12f151f3c3f5921b61c25542acf983f8360829693e5b73b42746a9c26b7be47833b7046001a33c8c1313eb0d2213f2341a12fa7f48b65eb38b7b4965e0e854293e25c3a60196942a510e06bca5265cea5576a70bfa677007141deebb863a18cd3e45fb134c222796f341ee65394ff3c377633720446076125e7be399b50e60a71b4f403cceaf51466504847b5bf0c8607af7aff592147d5761dda83db59c77d349c14ede631129b1d2ce9fbcb85b69d82bc809718a56ddb46cae2d5b1d671e5e88c07199b8c25445292ab6b5584c38e40e4ec57417ac330fb865eccd7ac77222801a68fe8d130f31bce69cbbff98c68f3795bc0ffb2ab3e88a5b05d0d75798d12a99b568784448c763f1821851cf731963fae9716821f6714b429a421ab8418c6683137544ed98d594a18fae3187741d3c2b26b352df4692b791fdcbd6ff3100bb36283a35aec5c3c50c65efc1444f298879a953e4f4ebacb2e4eca57a66300da97406139c658e7086cd1c68ed9c10b42fe191d8b801df8d5f653034b615f4a62d6c35c91f27f7f548bd3897ef42f74a185dbde7e475b25f0b300abf91c61ba08678606c316eb8105f117ce924c1ac3927518e9832dc78950ed73eb01b83811913650052017d6b1a4972796023439d6006faab74b90d019b73ca92232b96b6655e679fa26f506cb8e0f80678d057bc04c166f29b34e1c1c8beea2d5cb908e314b4eb2b3c384b4d73bcd9072c53d546807f22293a68da957bea8c52a101e4b75d00fc36e1180d45b29d43470482d2985e01a1d93e3d681126529bf418ebc4dbd6614b9c510963669524ab083bf60e66f59a3bd978737ea566398ccee94feb73621aea7d6d4987104d7f183799aefe5e6605c2ed446f0029b5c7308f77e4c204447b3451a37bf49df2913a725248a85a1ec917db8e7f7ddb836082232970437c356febf3cf7e8890135d01ecbfd5fea071172d846ad3a165cc3e4dccf3134d8eea7f1264daba5a636be6fd4c68001f47087c4a8554c2779fb9862d0c2e7e83eab8af57377a240a53669ff835fe13f3f7315cfe5d31c6dcb7de969925bc05582b05c6004555ac5ea394974e96e5a812d10eecbe6ca58305ffba21ea3424937223df50e0bbd20cbd2fce969141bafd4ac8b5abd6705e8d5b1d0e187a10c1cbf50528687aa066514ca9de0cef47e3a1a244037c2d5b877bbd5be0f03a7bef838eef818f4f9441cccc360967bb9520a8c304d76d045bd59f4ff85b90096a4241f07ac4e919382221f7d5be5746eeb10f58df406f91e7b482b28755849f06495189b90544f142013d4541909fc671e46dcf6cf4bf093fe8b46a2552f849b7572605fc59f52d3110d06211fc995ab6ba9f2401becc10fb2cec99e7b2d11721f28df4b57464b203a47cca7ce876bec4fb7175de03066d3f2befe6695ea6aaa7d7c43fa48da9cd6a9ea08efd06e003725a8db181425754a8883214f3a27bd60eb279292bf473ed107e22fe10492c9b4a576820d23ac9fc6564ef0e48938938b47d41a3a0272d4b88dfbefa03fe061ee2e11987f9c68f6b05d548130568b83a3bf0fc94b6f8fe976993d2c93108c9f766dfb4da1f5ea3a889fd2c52381095ca6ca705602015c393e563e2e4f295aed70ded24ea4e8c66c257759a332e384a5b6fca85db2f409bfbf2e117e957bbf09cdafc57b88f43411e69c57fd2ab7b2d6ebfb1dfd13187df2c76896fc4a7a46b2fd36655746c021cd261a020fa17e92d18d29b7ca3787ce32dc477117a8c88fd43797a9ae8138e8c30408312484ded7a99d8453eedab3def0a2cbda47ff9c650836a7dc674a0cbab2e283e30065b3b54bd0695a80c9c0064cc2f52e2a580daafb84e0ec1c021a84f0931d2f5c2a7a67638c9c8eb52d981820176897f3264e88bcf26c86148e50d258a8d5fbc66c89a873bdaf839348dcfd6d4b0a233eba7acb75f2fe403cda3a3b76b4cec99d27352e2fe1c0a41d8a9603f5f8a86ba4c10ceb1e77559f1de25cbfc33f262beffe31b0fbf98d9e22a02b6f70728a8b244113b17924f016cc9ee9b7df7837eae73ca47e66c7c6e8b373a0e92e5603681b5ec1336c28f6884e4a89e8c2b0205d9682047add5722556d039551b550483a806a87f200bd9d1e45bf3d80ecad24739a8c01127f39ccb0453ed587fde317dc863e8edb3ec8e3604abd26a471ef2d117d9d2e20017ea8083b2cea5e8ec4ef89051f2e4860b67a5c9a9cb68115fe91becca6851f1c1aacc038734966a42adbe9d62ab2e554b243b4eb965efeec12d566fd8910b933396eb0815c68eca80192ddeb97da8ae099658b9ca86d5147f5cf2c7279e2372b601991d3fc21790d7d96fdaba2b9ffe3d55843b2413736c94c4798502df99f77654c70da1f543078513a16cc2edf939f2a0a251dbf092120cec70cbc7acd97553833ba623c2dd22d78b6637df7c944f5d3c31389a95ddb71cd29c88b9d681dd936994d8a50a6c32619ef4fadbfdcf2ebbc2971f956ca01772daaec6c63ef2ca8fd65fbd13ac8fd3f1bbfa308154c0ae02fff47383a73e76e993b15073df064c63ae6e174623b196bda852a5cf7e4e11e37e4004efb4eb885a9c6fe2a83b200d68a6e4493226ae85e5c70a96795355a56b4c45a41705b0c6aad5c006eb4015b82d806318f9f744ea0b7ec1d6599ef19efdb16d6fa8d171bcf2be592439f4c265b49f3e6545caeb9143d23f9857f23ddbb0c4d3594ed80110d2bacf328250a1c8b80640e714a59574d32e33bbf9eb6b692e4ec60fe2af1add84d4d018255d752504fad9e6dfabc766c2af106c636454389547970949c78a387fc42538bb326f826b578e09d20ad53d41939cd89978986942fd6b62fe60f6a024d45de4dde70d8eb785a4c1124c53b7402b8ce2e8014685199143299bbf1a8757705a6e0ad94b2d2a618b3bbd923a13e71015774c9715d8dbdc2342bfd4afeca8c371cac6171c139418c5104e44d0408cee34669b276b3bd74a9b304d0a3579682cf0a3568a8b59423640a9917f858f0828ae23efc8f4024663950efb544e63dcec969ba94baf09898e35102e5eca6dfbeb5ebb271e8addcd5a68e820adec4b8a6fcf09f0a9f40f868cd85a9dd53253ce814821eda0b5ecfce3450a4cf4845692399e0c4cf57e9ef01946dbd67179aae6a2b38985de0b8ebb5da4947da4c046c3c57637fa86e71a4a2e54c6cb51686201efaedf544b20ace7ef82b21d457779f1cb289fb833700ece19fb0d6841787bb3d63110d2d710f02f69d770b1b45e5093c0e7449fc176aa08454766fc78e1e202bda839ea9f1898695b9a15c19b5946f683a8df4dde64b93260a4c84d2c17018b9dbe4db89535d7d63b286a7cee5c531b2bb50aa58de1fb0236f7aedcccee3735526d820827388e5936b9d440cff67f22b9792202f61567a0a47adb22bceb0c1c3f825609e75d8277d98324d509d724fa6bde06f6471be374b1a39b0edf33c21284f6386d465f5f4bcc30ef504e9bed299e8833620368e36d500c3f0191ee9fd5541ff7ab3e947c406d78ffad583e6c594fc6ed7e5833b02df9c2ea5f69461428f35dce3a3862a7df1d8793aedc723b1cd112213ff613d8b338c69767b2ca5a983587128b239c9e4d8429edbc731efd5083ee567e47fc25eaf950a72c892b210fb42d5ab8f3fa0be1af5e813e86a151b627e6537c5a2183fff7657c2096c8aaea835c3257d637b7a6adc3a33943cc3be5d9729c34c613ed5d7afc4ab6d095ac7e981ead0bfc030b9c4560936df74435a79fc0685b535452efd47267667ae3ed8f3820c5b928cee133d3f73aafc29983df8e0a586d260af1ab4ce9c169b54a64033ed2792e6172f32e0fe1e0a534589bff13385cb2e8af91959c65c26ee5dd9405c7c2780c6605af46f25f07834005cb7c6befb9334a482dfa858d974e67b63a57b7fafe0bf926010a86d1f3984ba4c073e80d4e782e47e924a7681568e12040bc64f2ffd1f5e300cbf833138bec195c842631c41809c29cb7845ff06f262e0590141", 0x1000, 0x7}, {&(0x7f00000000c0)="f9dce5becdfeee685ec27d1900e343a466629e296e8b33155074aaeacf7196372b982c19800ca6603231475c7e4f5c1a1ab2be4a1cf801216f", 0x39, 0x8}, {&(0x7f0000000200)="4fbbdff1531396d55ecae6e82961b50d3bc5d0c4fe956f34fc9ab0773fbcdbe89fa33f2bfc1da6128077e941dd20141d8ac4456b6d415118ddbb2eda2fdd12cc3a766bfc608558fc84977f7005c752a25becebd837b8dfe5c953073fb76f8d84f70b6925554f05d8ee9c57e11cdb653c1dd81b", 0x73, 0x1}, {&(0x7f0000000100)="9a090dcbff77daa5291159cb09625bef13517ecaab2be21e0c2cc0db7556a2", 0x1f, 0x5}, {&(0x7f0000001340)="596c86404de49df449865033ad94060c83744a56a8beea0942ded02ac86130a20740d48ad92775566f19bcc6839f4a14689fd37a1f0f8e2444426604437ed41c1da14f654d1f58453864740b275aa423a0a11458be", 0x55, 0x80000000}, {&(0x7f00000013c0)="279eb9f57af039f1013f07d789d6f7ba13ca7ec28372a4640ed9aa09592588e87baaf54ead3bd919f7ee9a345f52907ebb523f61adacb6abc5dbd6a5f54dbc578af157bd59822f2b9fe942a0078f1805b5c191e5e47556276fdae6555640a0be8ca8", 0x62, 0x7fff}], 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="6562886f72733d72656d6f756eff3447923302b2805ae31a8d41191cc90f00002ca5afc7d544df21baff5692f1fab8278061704e726105d51275ada709887c7b2650ed7ea3f40650d94f279448b833a1238dc7274d0ef82cc54a82d6c94b9d7430616958e5a8753583d23c341a2855d95fd5ed876df31b13dc80abf1da6d9dc0e8dcd093f243164b1e26426ff30ca76480507092cc6d9b28235a09cc8ce20d93781bc70d2f4862441e2fc326b6e6ea6c7b2db95d0cf80d1e02739c1972a5a31608757b304d0e8e99d663f34e78057c70d73788edfdcda4cd3d80a156ccc76e7d55caf58bc52e769cc748f860ce0c78ea996f350941c4ff"]) r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000001600)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001680)="7feda1031096838e095edaf2d353069635c5a90a956496fce3adeda3d4162a0d1ca5af331f6630b674ab698cf4de210418438d0cd21071c8a0df2041ac1fe42da68d801b", 0x44}, {&(0x7f0000001700)="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", 0xfe}, {&(0x7f0000001800)="ba9b9747c17a33d56f2445191aee6becb9442308c47c09174991846336e45a5e4bd6c0cf56c0dfa31108ce0b87216af87d75f8d26b6f3d9945eae36819819685e561eb4ceb63105ed4c23740a73af0b2352238360e45b6fdcf08a5c7ad0daf3d744baf3ea229851fb4be631e20c9c79d2fa98d7aa590a030e7d4b2c1c53d77f230714a1ab03255ec84fad7d55ac086a0043eb23c1213c15a4850530d680461cffb58fc91f5ff0d558e37803c1335dca48105b27e7d9b9d7ae95351ad26f3f3356c68b862d63579bc6837f294bc34a9170e2707b49f9309f677607d31c640904a1565ec556546ea7ded2d8a6c006ae7edae4d1993a11c22ac31ef69131f3ba61a06f15d60e64702821d1de354ea5d8deb31dc74623b7cbfb3c2102856b09e7c754a9337f75bcb133edcf39c1ac8cce13d0b387995e680cefb48c13bee71b8d7dea4e602ecb08c7455dcd3f7b6788b4a376405a2986bcf91b6eb54de2e21a51e0a548d3b0bf5381cf6ccb371e2469d2352b6b26e6d6ac5e0a9d431056b6c4ff98c075f10d0bb422d4060ef698a52740f6430d55326af93dfc83645fe1dc0bc1d59b2a6053fc06ebf3c39e8b051c479b363fc6231d97aa0846a4f5372a18f7be1b3f4c7901bc9d3239c3f23ab9b080547e4d5953e7d1902d197c2aa9f6f04121ac187db450dcd965b09d9f2fd14f76d178e3ddbce0956275b06361d1278e660cdbddc0514cd46af8a4744810964f836a59b354e55ed368ca8c5fa808c0970679651ff970302eec01de8a806da9b412d7661bf492db6735c6376d3be2ed88c18b3e65e3e0b8a3ea8184e30529fb295bd32bc371f7fa6853e764eb20082bd88df6f04d2fc4c64139fa400db316ef91c8d91d84f78950088fe5066885117a7c7a0fc6e287682c52e4a68f2b1a33d8c8cd6487602ff327c40f9dc722b4458830ce9f9f4c51c213e89bff1b38b6d86a658b16f537bebdc1384776c8f44dfb05e5f74b628aeaba1d303ffbf3829b272936a5618115d814235ab69040a70f1e471d880f7775620b0eeaf6fee55929a80f9308ab31f003a1857218ef0a3592c006518593d12e7396dc409637dea3db75a25aec2044ec38f849168e329739b952e3057eb6c1103eeb02b22af4810fdec14493e197ea478074ba396f7b694492537a1dbd1788bc7ab9f92fc5ed951a45e2b2e427306613477d1ada661544a3e9965beed3cd738ad948066ee88c0936b96556d1b16cba0e1465e88e0d253671103871e979902dc6b866ff1cc9b3d2c5a246bdf74a8de07a7a20b6845fd45b1b4ed91af4563b5ec5c04ece209b44fb94522fad10e56205efa68b48d0e1a76dc08699ca84c77bbc4e0b7f6d24ca16e3842b5c1f6fc82c76cdb1d190b98e3a9936a2e1ddee363e320716e52fd78d9a964fada7b37e5e8e4284daa465f818e37249b91b840b64de465c50579d8c6e0ca2a8b0a7ec5dfccbc39751913e7648dcecc3db058e9a09075f81554aa4d658b7f6996473037359fd042a7416bca2ef3470abb9c5c195b58da0680be151939f1018f8746392e0ff360b56795b5f5ba5865106eb6d7118f0f31e2664844175c30a899cc48fd5ef593d70d870281b6f2964dba14f89fc5d4b168cb38e5494d49fdbbfb6deb9fc94c0dfbc226993ce34d2f1210eb88fcf7f8278e3c46b22c4a115e4c750353a0276c7720ec0cdcab72207f0202b9c8df83b17e5bf35a47cdc72db31b520e7662b935de4f0a3c76b87ed09c07f689595d8897f8f1efe35de3485501d55b36a7bba9b52cd9e51fa3ea92f7544bd5a9535d8721dfddaa446ee9cf1e7342c292213711f126a06050a219fe50326f0f093c68dd3a96f56be516ec16e723c6f77fb043c240b9a1d37a588956b76996f05a7bb809b82d17276257301a3a1c49d9a53b958ca40e78da40981536a72a945abc88ac52874c0647efd459bf593742a3c7c8dc85d4935ef571ebdaadfb86a3442ffb79554962a4dbfb382ea4663aa74aa72941ddde5356e0d28388e04500920421a48c7a9ac599c26ec52c39422781b66f16b73f6bfe88c2b3175fd3ab66a88a0f68128e6344b0ce818d4299fae1136e980e35fa997c1f3c3ab9cfad9a801a2c569595f95337babb91ac67851a0dc9611bf539d13175009892eec629469bb28a49c857000d6b1936ea0c85f446460e91f7a3246bde423ed713f9fbf7ea954f4b2c2fc98389adeb81174774669fbe6ab2c5ca3364600103d089ff2285f991b731259c8e272623d91241cd56022f61ce91cad6b39ef29d5564d1a9b6b2a97141e46b5e7c4cda88743ee0ba71db16725420653a4e8b1f44867b6002bcbe4d2703805320b27c15498c74491c393f397bef3a8b6032aef41aa44b1d67035c98ae4562e704429d36b959d69ee79cc1d146901a4b5bd39b6dfa7a015823bbe691a737ef6d4627464f9de1ef0bf82fbc0354ff74d30dc607213b5137d103433430489c276638d30aac01475721840619ab557c8718f55ee2074efae154ce8fb5b42d1eb4e918ed31f9c0b1464bbf39d7879211b5dde9efc3772e572512957ea6744949c759d626d5ea3935981fe0c129ab06e75dc18fe9fe62d8b827f7d0c64503a6b5f30c2253ca5d51f1e62d6c487886cfeceed9e04644530008f9b52c5f4d567b3677e4275ed47ecf479ad2ba78d425ec34d406a26f6e727ae8c4e0f9b8c10e85815d5dcd18892114af6c914d18a3e2131e833097e2f236b71d07ccd373f0a9cf6b49b6436aebdc0b4107a24e813d79e188eb9e7d90e6abae949a6fb41d44eb66a14ca2f7ad5be873426ad5b2e3141ed34afeb849ccfbdaad9253dae5a52a43a7982e6f4c62106ac5174d70ffa8aa6fd8934351a816b25d02e219daaa644c193d5a9d2ca56ff9a7a11168a68007d1dc36e48ecba158582f8183645eab92e43d301d211eef77520827fcd9b3552f798787b8e1d68fd1c05109767051ef8e5caac5323df357893c361c9449d45f55e153cc08d1e945f4843f5de983d5f4958e14395935b630e054af6c36f2063b20a694640c2d1a08933c16bca75b93ceb2636a75376104cf26f81b5dfc000c55605780783847289032788b24e4396bb4d312349945441fbfbf091510c95ed422d5a2527761362069e15c88316f12b058012bafbbc6f3491ac96b6f20ec7454e19033b740870687f183cc9f6eefa36c9170303c22549e1e6ac6e1456621db6f1325dea532e2238fa2fb572b0e1134b4735c4058b43b7a4793454c6bb7d88000776b3693aa57a6f8ff41ddf422a26a8c62679878142551d5f3e8a7f610708e5c8d6796383da4f12ee5f7988d5a5fcddcf68a5fc223af1e1aa9997dc1986098f4580839b1264d4b325239908b31fde91763140a0e7181f2e9d676ed45f0a435420ecb1d2125ef371fa5f458820792498884e194f0dd2c660441dd7d754c54c63b55f75d6951d3f9f0edce88d1d385f3d1d39a63fe356c44697b5b90c97c0b12a6b32c59e221871e24660312091e097f8a336f2c1e88ef455d7e3e5f2bd0cb42cd292d2618e48fcc96b8883be658e5cd6e0ca39eb9399de5d49f7aa5e14fdb81f1853553445ba58436015cfc99636dedaee204cfae117c9867f98ed7626c15b48236b0d622e09fd9f7d87af1fb005248351ebc579c34f6fa9da65a2951368c781d6f77856cc313de9aa1efc25488634b7402b8aa3dd16c143d90f6615ea4a7cfcd85a1f938556700c7305cf77fa3b23b4258a422760cc479f0a24be1329c99a46a1e35f140f2004c93422fa66fc85502e0d5f2094d3e460e2797f8fc807fe0459fb7fe691ca8bf02f5d5012f86ecbda6b5c9b1a2229c8fc751792905a5661d595226b4ed30060655895d009aedb200e0063b4140933c573e4e05bbb27e40110fbaabda04912bb6094ef1ba541bd32b5f107f8c989c5045939cbcb1a499e259f122ce642317f180c575071705c9c6884635c49869ec899fc544f50b720c62c1420f8485564610479c0149551609d27fc60d83625f91e9d4e9f3c143e911e775a629c5527397243b7eeb2173f99841daf9098da0b3a7c1623248618334287664d35e9ae05ddd1ff4fbb738e7217070d95c432ac5f9ae73d0ae930c7cc8ae5824b3b3ae8f38ccceb2bd7831804004d4072507d1b7ae056644d53f7be925b7df56b290486b2b46f22f75f31e2f8656df4dbd3c2917c08dcbc7d9ac8f53c2c8e784b1febe0263c86fe7c2198b0ab436a34f34bd6731c25fb1f9f02c004b458b92e743eed2596366827476e3425d3eba108a99949b3fcae1bd92ba4b2c6f30a1709a67b508dcf6e9704935806a4583781fd52ac4bd3262598336ea41d197e082d5d92ef9621d7b8a74a8c42b4708159016e14c757fb0a4de3656a51a3fa881e6d5144cef3baa7a4321b56aa27cfd2a42f6b5e3b3cc640bad3509101d66c6544973c2cb7e3fe0e40f4c459934a55d1c97966313b662698f6e5ab75cf445104a8e86245c92f300e8da4e4cc8870efd77c800a05ad16f052b6dc3c85063d35bd277904c24957e5724711844de762e3e3ead1b2bcbb448f3a8fcb2066d06ea808e2afeaf1b42dd234f16f4cb8e090986d2667a22c60aa3e079708de9d764656c3c51d048ba53f25971b560fe8c325ba6ba0de195c818e1dba6a1ad909b0ddb3fddbd9a56295193055b72a0c087904c5cf61c5e164f3167aaff9279379bafaa70ebe99578285179ab62695fd9c048416b859382b5df6a3ba3b1b7e1b2f6c9e7fa8656a2259cf7508341cf9540a496d594c454123425cc7cd347cb89b451275320960c9be7d7b217f07bfd2efb7f17346c901bd2baf88f16a8cd6eae118a8e3f186a7f59d973973bb8b09fb5f7b9a54a5c191c0d4c31e0f55391d1af37408acbf70e5f3da7ca1f23e39d50a841b472d6cdf313518956b23532ffe5d44b8d40fa6367b412ee896595a6d0c8f1adbea6ee0bf0fe045af24508d7d1c3e7a35f9a86d1352b8b2dd5749adbad47234a6109e5a5701159f54f8c0ba05ed8f9353e081c805e9a64932510840c2198d12284ba3d6196bd0b58925368539227397a6d17e40f24dda110150e33ca736f7a3b5126ba5fa68e39c9368f823c0b14624f05c09386f7177bc6a4b2c39e09332c5896392725b497e03bba38361a65fe61508bd105063635ef79ea2ea972bdb715bf35bc6cd798b5e2c6ac95e57949ff33183c50ae14ee65f400b35aad92334216733dd19754a98061a54ff347e097e6f55b12f94ecb43ee315a3b6d8a6f97b38719d9bc87f53a0514215a97842f91d35ab95f1a382b1667d51d0895931a414c2b6d7f339d16fbfd1725a4eccf25142b804da204b6389a762260ede646f1b2200fb02a6e98fe9a35cbe5ff457ac648711073ae3564b71c015d7d8bcee32f12771dd8ac6c465a2e79c52f486e032d08d49f3f286e3acb8c946d269a6f76b86a86f3c883769db6769f00671bb8eead3b005851a0b693f6b177d6f31d28e8f4f16b12ee8260674e94d8ad43de858d6a40b7c4c765727804e34fed098d4d3d928d05bfe9e1d72dfc22954b3eaa51d8a80536efb06fe02c57c02d2e0a17264047e2a8d8f3607dbc34a8711bd46beffe5e4915f40d3c24cc1daa4ba6fd9c9f7688af2d269af1e78d122055235726b740d23a2067d8402ddc1d02d5edecd47187ff2cbfced9d19386c947e821ceac1f3e6089f05db5fcbe4b079555d68bbde0a57fc5ca2239f2ed60cf55a7c25440e239d8c261574f3af666a75dd7dc950523291816f1b3c4e5850257ca6e8bb42fc000e315e7c2aa18a6d0ad0e40674f95", 0x1000}, {&(0x7f0000002800)="f5fa825de5167a2bc991ef606ba247487b522a53630a48d2e102cdd6dcb5939cf55e4bba5b855c03070a6c267f28c947cdeaa050f79ee1c5e8f86cd3546392af0212da4982a3d40ec2eea7805cf5a1cfb9c6802c00c5e752d9c3a6604cde1c4c187f7240d6293fd3e6faf7649a9a624b5b45f8deb4f304b34b2337bf862f8e0892756d8b46634a81b58b876035d3b9db87107db16cf7edc4470fcf0d85d02afd894fe09d95ac0475d3e49c9981b9ead1fe60d70a297fa8752f3be9d5295ab171a2a0639b879313f488f6fa257e04c03d65ba2534", 0xd4}, {&(0x7f0000002900)="a3be8702fec1cb52d18b4a7a310cc1eba0ac72f9372c8952baec70aa12df1eb018bfa08b934ac3db422f405541deb6bdccab26660c3c640329ff754725629b4f14a2ecf1dc46b294f9688b0255c1fb08e208ade8cc1c577cdc0d05d1f9efbf3c79056588f7f46358dbbfeac34dbd3ef80f3fae28b54157909b84a25102b7bc6e60a32f1442f0d3ae0b56ac8f04a39e7b5df1da2bc2193b8c574d70d112f7691ff04abced148d838f53b66e337a3e1b41998cf96716451499cf", 0xb9}], 0x5, &(0x7f0000002a40)=[{0x70, 0x19b, 0x7fffffff, "899af31059934e7a5f5d79303378004f7dc104c5a302efb4bfc100cd7ad7543788e6b350e64a1055c427b9fb8697ada0c054b1be3f2ef497c5f58d706a8c55171bc053daf9e1de29b6019d8df2f323bb5ee9dfee76995ecda8b4897f79ba"}], 0x70}}], 0x1, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0xffffffffffffff5a) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000ff0000000000000000000000007f0000000000000000000000004000000000000000000000000000000000000000000000000000000000000000002000"/88], 0x58}, 0x0) [ 3139.551590][T23300] input: syz1 as /devices/virtual/input/input198 03:46:22 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x80fe}, 0x0) [ 3139.644749][T23285] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3139.702596][T23306] jfs: Unrecognized mount option "ebˆors=remounÿ4G’3²€ZãAÉ" or missing value [ 3139.786077][T23245] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3139.878962][T23300] input: syz1 as /devices/virtual/input/input199 [ 3141.704193][ C0] net_ratelimit: 18 callbacks suppressed [ 3141.704203][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.715839][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3141.721658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3141.727662][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:25 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendto$x25(r1, &(0x7f0000000000)="1c5831da588cb93379a41e6593", 0xd, 0x40801, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:25 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5c7000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000180)=""/165) 03:46:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xc0fe}, 0x0) 03:46:25 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340bf00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xb9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x4000800000}, 0x8) 03:46:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40045566) [ 3142.011653][T23330] validate_nla: 6 callbacks suppressed [ 3142.011661][T23330] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3142.022572][T23335] rds_sendmsg: 1 callbacks suppressed [ 3142.022631][T23335] atomic_op 00000000b589ebb9 conn xmit_atomic 0000000016d46f7e 03:46:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000010000000000"], 0x58}, 0x0) [ 3142.065109][T23334] input: syz1 as /devices/virtual/input/input200 [ 3142.081376][T23339] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfc00}, 0x0) [ 3142.262626][T23356] atomic_op 00000000236090b8 conn xmit_atomic 0000000016d46f7e 03:46:25 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3ff, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:25 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000f9ccbb79d7c49ce1f3a0bf76d1ce2b1c7923f20a4f431f0d62"], 0x58}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x40) getsockopt$rose(r1, 0x104, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$rds(r1, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/83, 0x53}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/244, 0xf4}], 0x6, &(0x7f0000002480)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xffffffffffff6032}, @zcopy_cookie={0x18, 0x114, 0xc, 0x80}, @rdma_dest={0x18, 0x114, 0x2, {0xac, 0x8}}], 0x48, 0x801}, 0x40) 03:46:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40045567) 03:46:25 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfe80}, 0x0) [ 3142.376737][T23330] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3142.424136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3142.430009][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3142.472357][T23330] __nla_validate_parse: 2 callbacks suppressed [ 3142.472367][T23330] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3142.545108][T23364] input: syz1 as /devices/virtual/input/input202 [ 3142.554905][T23370] atomic_op 000000008891b1c7 conn xmit_atomic 0000000016d46f7e [ 3142.579979][T23339] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3142.616261][T23339] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:26 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:26 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfec0}, 0x0) 03:46:26 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x40000000000001) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3142.777554][T23364] input: syz1 as /devices/virtual/input/input203 [ 3142.824135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3142.824153][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3142.829952][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3142.835736][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:46:26 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c000000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:26 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000180)) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1e1effff", @ANYRES16=r2, @ANYBLOB="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"], 0x3}}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40045568) 03:46:26 executing program 3: r0 = socket$tipc(0x1e, 0x7, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f300000000000000000000ffffff7f00000000000000"], 0x58}, 0x0) [ 3143.013137][T23389] atomic_op 0000000057c195d8 conn xmit_atomic 0000000016d46f7e [ 3143.033115][T23395] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3143.047349][T23392] input: syz1 as /devices/virtual/input/input204 [ 3143.094993][T23395] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:26 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40108025}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@gettaction={0x78, 0x32, 0x900, 0x70bd26, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x14, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x10, 0x20, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) accept4(r1, 0x0, 0x0, 0x0) 03:46:26 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xff00}, 0x0) [ 3143.170440][T23404] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:26 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000000c0)=""/132, &(0x7f0000000040)=0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3143.253420][T23404] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40045569) [ 3143.362162][T23419] atomic_op 000000002701e9cf conn xmit_atomic 0000000016d46f7e 03:46:26 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x1a000}, 0x0) 03:46:26 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000000000000140100000200000400000000000000000000000000000000000000000000000000000000609500"/88], 0x58}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r2, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=""/4096, 0x1000}) [ 3143.516949][T23428] input: syz1 as /devices/virtual/input/input206 03:46:26 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000180)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, 0x4, 0x7, 0x5, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000540)=0x28) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000008c0)=@assoc_id=0x0, &(0x7f0000000900)=0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002c40)={0x0, @in6={{0xa, 0x4e22, 0x8, @empty}}}, &(0x7f0000002d00)=0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002d40)={0x0, 0x9}, &(0x7f0000002d80)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002dc0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0xffffffffffffff04, 0x1, 0x6, 0x7fffffff, 0xabd}, &(0x7f0000002e80)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000003400)={0x0, 0xb6, "12acc0693e559d2d9c63365169f20276851f8939c5a144f5ebacf0851c1c70dbbb4748c56592fc2db2d18c7a8e1bedf04509eed0be0f26f8e99d594e26a7ace3cc006fff1dd87edecba4af335954a33ed626dd9908ec54b0be2a2e9bad4ca18c32acee56616082257470be427559d66cb8ddebf724d40f440eec143904a678da25f138a7f417e248cbf27f666d155bba3feb168534281b47c8c9ad62151ea601b15db49f3ec60caad9b5a144a1c254ae6a301aa3f887"}, &(0x7f00000034c0)=0xbe) sendmmsg$inet_sctp(r0, &(0x7f0000003580)=[{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000200)="9e29bdd7d6690dbc9dd390cf1f18f555326036109bc8f6d99f5074c529143d5764c11d707626d24b43eb60f15be300c919fff3ea8b6cb1c8c51c3ac667fcc46d87718b329ab50818b9e82c61208957f8d432b743524cb5434e56eee47dab9a664cc54ded29e357c8167cefebaa2773e4a73c2086d8798027a57a4c3da883d1e8e8daeb42ac356fd44dc294788fdb4f1ff4d4a24f49f2725f95f68fcc2cb5bcc26db1285fc7d9627ef510c4fff738ad141c3db180f4fa4e01bfe8f2ee22b434dc3078dbafba08cb31d3e3dbf8345ee1008394216b2b0626abc87e237046943c2ae8c8fda03b4b46cd8f95e9b9b6aaf6650e7ac296097b3d3faf80b363", 0xfc}, {&(0x7f0000000400)="88ece8c4a95db3624baba9f31d2de24c27aa82ae41bd18f458f30fabbdbca9392e608aadabd24c2ef8e9dab9f197483e368e8fb48513b74a534e06526ef650543b8809b212594769a2c0e0c1983cbfe91af2a19bba6cdc6f62086f7086e702f6f48492402babe4952d0b8984d083a43ad8880c92602d0be5ef205e9d0e00c8c0ed2cb0ba80db887177d2e119878ee817e3c5ea9f95cf280a181602d8c85532de20306aeb4c7b01cb5ba60566cd87793299e4eb443eb51d6a2d11cc67f94c81a91fc865e4f20e0279a57fff7debb925d333b0cc19cb", 0xd5}, {&(0x7f0000000300)="8585678c090f4370ada53cd5599e9f8beff4dd36efa46e301ee27a51cb2b88643235f734e4ad73a28777b911e03b9294df3a01afe699d060fb8457f7bef46c0bc0ba9fc6d7397c1522617bad0d416ec75330de2b9fc7709c789a4bad1c0a8d7c2d400de559f421a727d79e85b0582e187c61ab6df50f2dcc6f569d3a495976", 0x7f}], 0x3, &(0x7f0000000580)=[@init={0x18, 0x84, 0x0, {0x11ef, 0x82d, 0x9, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0x101}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffffffffffff}}, @prinfo={0x18}, @init={0x18, 0x84, 0x0, {0x5, 0x30000, 0x8, 0x2}}, @init={0x18, 0x84, 0x0, {0x5, 0xfffffffffffffffb, 0x400, 0x7fffffff}}, @init={0x18, 0x84, 0x0, {0x95, 0x8000, 0x9, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8002, 0x5, 0x8001, r3}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}], 0x100, 0x14}, {&(0x7f0000000680)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f00000006c0)="88bec4283a06db899353c72df0d19acdac90745f06b1c6c09edfa39598fa361a7d98b782e6d913681a90d1544f7133039b844098ebe967515b0cc32ac69c04ea87b6a299348f2c956ec8fd140e8966e5b5b8571b4697fcbcc19b77", 0x5b}, {&(0x7f0000000740)="1dc003660af1f0368917d28c1be156fb39d80bb8b302667529239aa7103771e7f623f78a2e4e2b90c1d153a52f2cef4648473b1ae29f32f48d562f101755a5e4416d6d4840f00a", 0x47}, {&(0x7f00000007c0)="3a493371c94afa47a1af45931359222f5e50a335656c88b3fb678af193067907fb06e04810b7dae0ad92011669c745dd06fc003952cb0e866ed2a6ae31deee0a6982cf1fe1354fc37f92d06d940620176ca5264d5230dcd7fa168a15498f360fbc1827aaf343adc67b5024a81b4808542f12534418aaf76e015d5d8d2ae84846452346309fa83ea6c822d48ddb85789f580f6d0844f3e064227dfe91631771cc839104f70f7410a772fe70b37a6f21c074a8c9acfaa759c6e13a", 0xba}], 0x3, &(0x7f0000000940)=[@init={0x18, 0x84, 0x0, {0xffff, 0x7ff, 0x80000000000000, 0x8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8, 0xfffffffffffffffb, 0x3, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x80, 0x8000}, {&(0x7f00000009c0)=@in6={0xa, 0x4e21, 0x3ff, @mcast2, 0x8000}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000a00)="dcd0f2e34a2e8452950d07fb1a07d030d687304002b86cba99b29c5c565496149909a8bbd61f6425c323c3e97cb72fce6ac6321832e27a76d27b7eab2d3765301d3a0f31cb53bc55594963836c9c1b90671adebc13031317d839106587d732744fde906a", 0x64}, {&(0x7f0000000a80)="2a0ff96c", 0x4}, {&(0x7f0000000ac0)="b4128d3c264c8407a00b4a6960ac279677c03e94176be9541102f388d8aa07a67826c78bfb232cd098653627aab955f9b4143cd6ba7e957506", 0x39}, {&(0x7f0000000b00)="17009ffba2e72012d438708c41cb9be7c891119ac0e13b58bab8b422075a903eef4a86c15eb214067b9295509054ed685c432b192ca24bc95f2688e429cd0eadfdb4e5482d199b036478aedac563ffa2e7f0ea45d63ce252396d3b40330a24fad05d992b9687741441d9d96e250f80e43997bcec5a765f037677894af4869c38e591e9ad84a72beeaf8dfc438dad65b32e4c0037f17901db8f", 0x99}, {&(0x7f0000000bc0)="842abb668ed7ce5c96b6d353a07cba7f4e24e04bdd6afd74972171af2a9696f4b0a518eea2d7ab65dd2f7489315c780ea3d7d1bd2b4b4236a237e2ad1d5b9b478633dbb8fd67cd3e021ce68be64848c14f288c08d268e11763904d717f3fd0f34ce88adf42f2c2aa29c76780ee6475037664b5e3c4ff49e640c5", 0x7a}, {&(0x7f0000000c40)="7c77175563a028c34e09b1f2cf4f449cad981944855922a107bb5345efb60b15f0a23cc28ec4a0e3cc64ec8ed56cf8c407804fc563dd5d8638b8edc4a955da3ed53ce1bd2a45b7a11a953bb0d9a728d357da1190d90e851941603f7b713c6aa5a7e277b9f53834e4bd56973a10c7fc2575eb9e00863db92170fc67d224d25c7ec84ef9393ea41f155c50b0fd625c73ddf7a565eb7b95a4d796d3afc17286c636ebaa3fd1e332e747f771cda46ea9a1f02c", 0xb1}, {&(0x7f0000000d00)="4958b54af92c417a76381d44077bdd3467fa94a6a70272040cfe14c5503e16be59ae5a642b9e326f2057f6bdb29b0417a971ef8b3e04fca8caaa2c2e9342e30a24229a45cacaf41e78a5f8ea76997a2e865e2237f038fef9ce02549d358317239fcd00d4ebe48171316366af8602aa1b370d32cda9ad347a0c7bb22f41c13aa2f9b66f5a38c61901caac2776597c86a61afdf55d26335bd5e4bc2912af627dac58120d48b3b4551dec3161e1887ae1", 0xaf}], 0x7, &(0x7f0000000e40)=[@authinfo={0x18, 0x84, 0x6, {0x7f}}], 0x18, 0x4000004}, {&(0x7f0000000e80)=@in6={0xa, 0x4e24, 0x8, @loopback, 0x1f}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000000ec0)="2836d52da2135c38e18c0f00a226eddfb495e11838d9701076650170c16a363687c89f0f5ad04f52c86b7e04e4cc4403711f18797742894b823d4634a7b1e8a665e8aa404b088a991b28e0a6def4ec06e88d91d8cbc3407ac03d32328834e94374f8727831e928f7f44e5988b29c", 0x6e}, {&(0x7f0000000f40)="d5c2c487f2892312c572f030a7239301d65463853d510043896d7a27da36db7b20b0387d0a4bff58cb67a129e79d58bc49aef74752d3a740e09aaec011c4c87efaf1ff340d232cd8f8621ce3efe0694b9a8bec5df3eb5bfdc2f4a70c742103356ea68ac6b7e14c80d65c5264a7246c30ce0f7aa1be67c644b905", 0x7a}, {&(0x7f0000000fc0)="aea99b8da89f76ba0190474161dcfc6558a67d9e2ea2fe1f784a6cb97426f47dd3d548660c120e603ea2ef82a6a53c5200940887edbb2ac8b37e968fa662b03ddb73a12c70828714", 0x48}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="52bc4233ca605682f267fdfbc5ee6125221c1b93a737ba48e34b6a2e1c843a90d79ac3210f2f", 0x26}, {&(0x7f0000002080)="10bfa20b38d6af74a480647c110fe63f2d4c3647d872b640ef1b0e93c83c327d10fc7ab48b015f2b1ce52be13ac977f568fb708b4ce17dda37f01c95774c49a8728acc30f7254953b573d664ae2b360bdf78a64a441b0213522dec406485feed157659cfb5f4c29d1ad41395ae59facfed74cd2e88ccea46b5db4c9fdf6bdfa2b11c8e9b71045dbbf6b14a64a96f6a07d2f7ca118c4afeea30da874b0993e0a00166fd2857b1836b16ed3bf4c0d2e840bcd4dd8adc2dff1effbbbfda964adde471714f0c4cab963fb505a52645f12a7b2668e0d978", 0xd5}], 0x6}, {&(0x7f0000002200)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002240)="3d1f70daade90110642a3c00e264ca6d12a32b24729480600ef9b32b5822c9428013ad1ea3c3098854c33e446e959ef08604175b45025b3ccd7ac31fff063e68bbf476049c64b77e8dde5699e07b1e23381b6bbaa242a70b3b0df8c46f7b5ce6596679d3e7f6d87fcae2312dde5e937ba386fb00fcbd289e659eddeb36ae2ecb4cfd944a57e79d4cb039980975141e7dca0fee39e775785948931dce1148956ee35253333245045407c61ea819daa66c73ed7d085d9b5ca9c620f788a2ae96d2aa", 0xc1}, {&(0x7f0000002340)="a630cfc20f91d7d2c496", 0xa}, {&(0x7f0000002380)="bd9eab329680537f187b18cf7d3e86188d72a28f70ff55002a1afe1c123c84dccc59ec17870435fdd932bda2fe4e5b30da51befa4baa0ca9205fe8ec026aeb0e8a884c5b2a8de3091184b0fcdb7cffc8534c66feb0537b", 0x57}, {&(0x7f0000002400)="f21ba52dfdf91b3fcce24eaabdb65847509010b835eec644fdd0b828aef90fae8d80568831cfb9f03bf3fe89d99ba871fdd09ac4026ea34a873edcd27fa6ff2f08f35beb31f71808840cbda54d234b47ae3eee45d3a8efbd42d96f", 0x5b}], 0x4, 0x0, 0x0, 0x40000}, {&(0x7f00000024c0)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002a80)=[{&(0x7f0000002500)="68956579443f8c13e6c5807a86c9f3539139afb2465d923de06e1e842a578f58097a9c82564511b24ceb93c74c799e70fbf40d38ec28ad84e82183e3bf9af26cdde3a46d801e9092f7cb8bcd33ff81c6095a651af83a5de138351c0d1393cdbb4cb1757ea88c7c4456d4966b786285ee66d8607dc736dfef5d96d77915abcf1623965c53a8beeaaaa8e2681228892aace2c4d15f4647b8617039a358b3aa4692315d1182370ccfa82361fc1845dc07232d8503921523919bba5957b54ba9a2f9accb0ebdda0217c6", 0xc8}, {&(0x7f0000002600)="9d24f40eee04d7a854629a07d7a59ac7bc1bbe3ce178592a872abc9d6c45a537ac481645f911628fb643dddecbd8bf4a024434ac41e351a0ac77f2db9ca0524e14ad8cd7d4a6bf2e46f56362c42e517f22bc2ed52e6089fd1f2da344eba45a42067a02d65a3a3ba87be1eac1b43848eb90847417030ed8df43e61bf3fa817c6bdbcb5de7a2a675ed1a819e9b5ba1e5057242ac", 0x93}, {&(0x7f00000026c0)="262976638da940348b684e5318e7d4816a5a8f594ff9ef31d3dcf406d50b4b0e5d61032c5d08891970a07da9e46edfa7fb6821e96bc84168468e9aa9a8dda9c45edda1dc85cdd1efe2dc33c9b30046bd4c5c2e947491ac747d", 0x59}, {&(0x7f0000002740)="491205fc5f42a691647ec1760b175201f6b64b1a0bb4fbc045ed2550d98cefc8b2d818ff8887a52fdf9ad02bf200c66c6f3a944ed44b452d57b99688857119fbf2d3fb5258b220c7fb12cd921dbd1bbb6de3a55191df20020023aa55908d41123666737d17bdfee1b965d16779d8befe8ead7b2e9091f17a19d43c04addf4ec41f4ffaa582e9e66926be69a4f68bc4fff8dda684bb4993b6c7c7cf43f9c64034", 0xa0}, {&(0x7f0000002800)="380cef31590eb28120215f8b3b35ffea0308d96fd4f5cb89af520f92a6e270f04e1eedb1d46a0146dac59b286da545073f1b964d2bd9e1f1aa9c5460189b514cc24c68e93f7afdbf0cf413c2992a6fe6", 0x50}, {&(0x7f0000002880)="d5dc3a6605060beff0c6966e4cf832cb05bb11b9e7800be8c677253879dd5ddd09dd7053db584d842cfdd00dd9e2775e5db9aaf09507b8ebb579f25ebbddd1e8cdece7400a0ace4bb470b3016cf25f578352fc00ddf8859eb6f50216008156ebc8435897cd26ead209c55d678f715f4fba231ac774ebe92e", 0x78}, {&(0x7f0000002900)="256a4a266b1f99e8900a6b2f35f47d3a7026d55917bbae17861ae13b5927640918", 0x21}, {&(0x7f0000002940)="382dc448f29629eff8d0f9ab39c1f82467c18591636821910e73cc0ce6cb106753e494bbd2e0d3a0431cb9106460740127061218e1", 0x35}, {&(0x7f0000002980)="5989957c3cab2cf799ce9c951f3a8ec655209d85a953e01f5f7c691fd3636e15771fbd003ef8c2b066ea87dad59ea51166566ef2f4c80d2da0dc62857b9a916f5a4308ad6aefb753c12554b400ebba5c00ef9b827147d73e610967e6f96c4cf8cb2e116cafb5d54b9848c882eb59dc9653955d569c2319ba72c552bab82fece602146770fabeb94f8eecf8e4a9745a45993e0008071260c3fd7c2cc11a0dd83e3cd3007ba9829a255a0fff103f174d78d9f6640e3924f2d1cb9afe33b8bbfd6cf5a263b7cfbefb219f451368ae0f9f5354551a38056bb90f55ff28d71584b3e70ab33ddc518a52d7456ac2a93cb9f8afd3", 0xf1}], 0x9, 0x0, 0x0, 0x4051}, {&(0x7f0000002b40)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002b80)="1da9e577e22d15de02f55bffc3301a8a54197b2b2d0f2ab2154330ee175d3455ac32e2507605b1e1bff83a5cf6c0059da18c6eddf8d1e69d74d12e0f2aeda0", 0x3f}, {&(0x7f0000002bc0)="799eb90ea504958f55fbdbb056856d94e08ab1636d8c8ce348d7a408a059e4ca62b972013d34", 0x26}], 0x2, &(0x7f0000002ec0)=[@sndrcv={0x30, 0x84, 0x1, {0x4, 0x80000000, 0x20a, 0x2, 0xffff, 0x7, 0x8, 0x2, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0xc8d, 0x2, 0x8000, 0xf4, 0x565, 0xe4, 0x6aed03f6, 0x9, r6}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0xa, 0x0, 0x6af, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0x100, 0x8000}, {&(0x7f0000002fc0)=@in6={0xa, 0x4e20, 0x7, @remote, 0xfffffffffffff17f}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000003000)="46b980c017e4085a7b226827bcb29965e709b446c6dfb4964aceed6ef2d47a54502e951fdf7515c57546b2a9a9fdfe9d86868032a693d4805923d14734c0e6ecea6b278b7ca653c22ad691424b96a54982dd23ce8ba886e5e4d169a0f2733b6e2aa98c5c87d64f24dd11ac3e9dd6eb889fec2e7b0a535f42994abf21055a72cd7c7aaa59f14bba2706e845b19179c4a16ba07c1ec5187cf48f9c56e9ec32d5e902645f3205944cd989828c4d", 0xac}, {&(0x7f00000030c0)="b7a08976cc04dd2d2dffe36d656b79606ba510bcdc286151dd8ffb97e1ade1e36192bf7b8d5354397d912e438c3370080574dcf646ccbe3e84c057ec9b0e97e299bbb65a64d47df54552e08eaa69fc2a71c0a32c5a8f9e1f6b439482d82d269acd097a0f2df2f935", 0x68}, {&(0x7f0000003140)="042720f60f8f25eda656d235bcac67316b624020e3a442f13096455813cfd41a4b4739fef9d94ddc0beec686", 0x2c}, {&(0x7f0000003180)="c6af5e2a7d988af48bc50b55de60c6c4680b690511d89c977235108e58e526327661b89fac32faaa067f54075d9442146266f53c4fa11409e2f73fde44d544b2d718990e85f8e428d9e5e4fdfea04620ff6b596b811f0b71a4cdcf0787e293eb6a3b0f6b2b7098734a84c5886ab80ef8dc277e8fe84e0f4bde94c0233416b3efa4bc06bd2b1d9bd92b018ceecdcc14c8318d006636fe0b04b92085cf23f00307df1b42a96175016f047dd2c2e74c9f71c9198d55b59818ba32a1ff8b96c3c95db82331f550ee5324e98eb15ae2da43bdbb80ba7fd5bfaa76752331e60ba8965db8c27b", 0xe3}, {&(0x7f0000003280)="3f26290ffd08c3050ea6611e1beff3bfd7", 0x11}, {&(0x7f00000032c0)="c814a87dde807b8eec73e78e827b52532ee104bb8855a5b0a50ae12a", 0x1c}, {&(0x7f0000003300)="4bdcf05e39dbe82c90c71b9f76c0a64bb9fcf042ee30f520e5538c1a00832940265fc91c230a88c70b0ff33aec289a8a149ed3b3c42e67841e4d5af471e2504f65618b50c0cb1db242b6f010cba2e8957258778d6dc764540a2d82a79a9a42ffa60c9cd88e9520a41bc4557a71edfb7a599f138277", 0x75}], 0x7, &(0x7f0000003500)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x2}}, @authinfo={0x18, 0x84, 0x6, {0xffff}}, @init={0x18, 0x84, 0x0, {0x6, 0x5, 0x7, 0x7fff}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8206, 0x7, 0xfffffffffffffffd, r8}}], 0x68, 0x11}], 0x8, 0x4000000) [ 3143.646325][T23404] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3143.662523][T23428] input: syz1 as /devices/virtual/input/input207 [ 3143.697019][T23436] atomic_op 000000008c989aec conn xmit_atomic 0000000016d46f7e [ 3143.721128][T23404] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:27 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200800, 0x0) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x77359400}}, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3143.752320][T23395] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3143.771909][T23395] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:27 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c100000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:27 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$9p(r1, &(0x7f0000000280)="7bcb71ec1e21159397702c297208bb4fb07426515773a0c4837aa1d5637bff1c338590b8f94fde4d34a3a2b15f01e93c330ea7df9eac6690d02c1e1aa9ddc1d939dc04db9e5cc359a3aa0bf8b24e194f7d87500798ce11c13342cbb154375485e9c1857e549e77dc6e9b11e536356221e0bf92098b08c1910e52dbef8a2fbb1258d6c7acfbc24806e7ff7d0a8337366ebebeec4bf084dcdc3c10d4d227ad591cab512a25eab7d6ead5e378e5762baabbf6a90f7280057a5ee4071f44500687843893ba605ebc935f0bb5d57dba6e1d82ba7004a9b94589", 0xd7) openat$mixer(0xffffffffffffff9c, 0x0, 0x4000000000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x4000, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl(r2, 0x1f, &(0x7f0000000380)="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") ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000140)={0x53, 0x9db, 0x5, 0x38e9}) 03:46:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x40000}, 0x0) 03:46:27 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f0000000180)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x3}}, 0x2d5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) listen(r1, 0x0) socket$inet6(0xa, 0x80006, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:27 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4004556a) 03:46:27 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x6, 0x3, 0x4, 0x1b, 0x0, 0x8, 0x40003, 0x2, 0x5, 0x8, 0xffffffffffff8000, 0x3bd3, 0x47d64ee, 0x8079, 0x9, 0x3fd14919, 0x1, 0x4, 0x401, 0xfffffffffffffffc, 0x5, 0x5, 0x6, 0x100000001, 0x2, 0x7000000000, 0x4, 0x81, 0x101, 0x7fff, 0x5, 0x3f, 0x27, 0x5, 0x5, 0x5, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x20320, 0x3ff, 0x5, 0x6, 0x1, 0x5, 0x80000001}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r2, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xef7, 0x40500) getsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000180), &(0x7f0000000200)=0x4) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x0, 0x70bd2c, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @loopback}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) bind$packet(r1, &(0x7f0000000600)={0x11, 0x0, r5, 0x1, 0x3f}, 0x14) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="5800000000000000140100000200000000000000000000000000df6ddcc5cdef97d17581a63af4a7ff1b0000007f000000000000000000000000000000000000000000000000000000000000187f6c4d28a10c8800"/104], 0x58}, 0x0) [ 3144.155850][T23457] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3144.194278][T23457] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3144.218551][T23465] atomic_op 000000005d957c5a conn xmit_atomic 0000000016d46f7e [ 3144.228848][T23464] QAT: Invalid ioctl [ 3144.242550][T23468] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3144.261926][T23463] input: syz1 as /devices/virtual/input/input208 03:46:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x100000}, 0x0) [ 3144.280020][T23468] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3144.441375][T23457] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3144.456911][T23464] QAT: Invalid ioctl [ 3144.473901][T23476] atomic_op 000000000a4ce705 conn xmit_atomic 0000000016d46f7e [ 3144.506985][T23468] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3144.536545][T23463] input: syz1 as /devices/virtual/input/input209 03:46:27 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xa00100}, 0x0) 03:46:28 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x820, 0x2) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x5) ioctl$KVM_RUN(r1, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:28 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xa0, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @broadcast}, 0x3f}, @in6={0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x2b}, 0x5}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x7, @empty, 0xffffffffffffffff}, @in={0x2, 0x4e22, @rand_addr=0x1d33d567}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r3, 0x20, 0x8, [0x2, 0x7f, 0x80ee, 0xffffffffffffffff, 0xfffffffffffffffd, 0x5, 0x0, 0x8]}, &(0x7f0000000340)=0x18) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000000)={@null, @null, @default, 0xa, 0xff, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @null]}) 03:46:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4004556b) 03:46:28 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c200000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3144.778576][T23486] atomic_op 00000000fc0aeeae conn xmit_atomic 0000000016d46f7e 03:46:28 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x1000000}, 0x0) [ 3144.973785][T23494] input: syz1 as /devices/virtual/input/input210 03:46:28 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x2, 0x7, 0x8, 0x5, 0x4, 0x5f51, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000080)) accept4(r1, 0x0, 0x0, 0x0) [ 3145.069429][T23506] atomic_op 00000000177f8be2 conn xmit_atomic 0000000016d46f7e 03:46:28 executing program 3: r0 = geteuid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0xc50e, 0x6, &(0x7f0000001680)=[{&(0x7f0000000340)="ecdb36f18647787eedcc8dbc3ee1af7f8a45d6c4f30bd566268f98d5fff755f36d91557896eabf4fe00727121c2c9e3a54b935fcb9c77d2ed5e0a91ea418a0ea07a927b61275100958e056aba5393ab49c3b3e5031579e008824f467ad2e058573705c9357103131c5ef47e91135e945a0083aa3db254f4049f9dd367c8d7780a0958a00f0ea170634c4d3f7d9ed5ae626f234f3e20da2f2238589b03b5b322e3f8c382c661d69b7b93b6d85c0e3f8a0f4667dee7a93dc3e836f38c9e6cde6e085bef9901f153f1583e3bf9c06139a59cf11bb0cd27505bcc3cf62062d2668", 0xdf, 0x81}, {&(0x7f0000000440)="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", 0x1000, 0x80fd}, {&(0x7f0000000240)="dc2945f42afb9cab1a12bc6cb3f745b673ed3a7022ecf673b35f52e1e67577c4c916d206c05ccf695d869e5e243a", 0x2e, 0x8001}, {&(0x7f0000001440)="752136b90a6dd21e53b74df1d393e013f4136cb53f41f4b8154923741a6fa2f8a0cb66b073eca744e79515ce99930bf4fddd35c0e5fd53e07e8a289b922da6fbc04477fbd91b313f6bf714c58401517e197568749dcab18478f125d3dece7b768345809b515baa483850bd3bf501890aa77fdc89c4493470df6c7fc38f347cf0ee1af7396fc6bfd55016e7bc467d21411929dcffadacc02f7960da2853bca9372321b34004", 0xa5, 0xbcea}, {&(0x7f0000001500)="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", 0xff, 0x7ff}, {&(0x7f0000001600)="d89fc1cf02a54392f7ae07905b036fe95cc148a92e16852e8799687acfc52bdddc6be48ae10a5435f743155bc639d77c358c50075950354e652cd6e0ae8ac403cffcbb86f9b32dbeef9856f42c286bd136b19b61d41720a4a60609ada4d38c421bf018691548f763", 0x68, 0xed8}], 0x10, &(0x7f00000017c0)={[{@map_acorn='map=acorn'}, {@dmode={'dmode', 0x3d, 0x1}}, {@map_normal='map=normal'}, {@map_acorn='map=acorn'}], [{@fsname={'fsname', 0x3d, '/dev/radio#\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_gt={'euid>', r0}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, '/dev/radio#\x00'}}, {@uid_gt={'uid>', r1}}, {@measure='measure'}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/radio#\x00'}}]}) r3 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$media(&(0x7f00000018c0)='/dev/media#\x00', 0x0, 0x800) write$FUSE_ENTRY(r4, &(0x7f0000001900)={0x90, 0x0, 0x4, {0x5, 0x2, 0x6, 0x1, 0x7, 0x1, {0x1, 0x9, 0xffffffff, 0x2, 0x81, 0x5, 0x9, 0x2, 0x800, 0x9, 0x7ff, r0, r2, 0x2}}}, 0x90) socket$rds(0x15, 0x5, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e23, @empty}, {0x0, @dev={[], 0x21}}, 0x0, {0x2, 0x4e23, @loopback}, 'caif0\x00'}) bind$rds(r3, &(0x7f0000000080)={0x2, 0xffffffffffffffff, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3145.155125][T23494] input: syz1 as /devices/virtual/input/input211 03:46:28 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x2000000}, 0x0) 03:46:28 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x3000000}, 0x0) 03:46:28 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x800, @rand_addr="238c0e51fa1a780b7a439f405096808c", 0x4}, r1}}, 0x30) r2 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x800) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000002c0)) r3 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:28 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c300000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4004556d) [ 3145.515641][T23524] isofs_fill_super: bread failed, dev=loop3, iso_blknum=47, block=94 03:46:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'ppp0'}, {0x20, 'eth1securitymd5sumsecurity{md5sum+'}, {0x20, '[%eth1em0system*vboxnet1'}], 0xa, "ee99aaffca66c9cd4f7cf7b40b7ca86357ff10df83408517badaf26a851d5c9d944e16f7837c1bf02be4c16ac00846273be478f383e1714b245e9a38e074ca4faac391b25472161d0a237737163f37403d2391932cbff876d2b84c04cc1425eaa38dbfd07367749eacd7d74a773074b6c352913946bd073c255434"}, 0xc7) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) 03:46:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4000000}, 0x0) [ 3145.726056][T23542] input: syz1 as /devices/virtual/input/input212 03:46:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x5000000}, 0x0) 03:46:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x40000) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200000, 0x0) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/74, 0x4a) 03:46:29 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000080)=0x400, 0x4) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2000, 0x0) openat$cgroup_ro(r3, &(0x7f00000001c0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) [ 3146.140505][T23542] input: syz1 as /devices/virtual/input/input213 03:46:29 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x36, 0x0, 0x300) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) 03:46:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6000000}, 0x0) 03:46:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4004556e) 03:46:29 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x5423, 0x1d86a44, 0x6, 0x80000001, 0x3}) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) 03:46:29 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c400000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3146.429159][T23582] input: syz1 as /devices/virtual/input/input214 03:46:29 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7000000}, 0x0) 03:46:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x9, 0x8, 0x1, 0x847e, 0x9, 0x154, 0x2d49, 0xffff, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x5, 0x208, 0x17f, 0x7, r1}, 0x10) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r3 = socket(0x1e, 0x5, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x200, 0x30314142, 0x3, @discrete={0x7, 0xc959}}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r3, 0x0) r4 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r4, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x0) [ 3146.619438][T23589] input: syz1 as /devices/virtual/input/input215 03:46:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x400c000) sendto$unix(r3, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x0, 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000000)="422995c2926053778ba74a7a2c931fbda496711074c70a95c0e1f88f31fa43152699b4d934d1b17d1b945835de6255e7", 0x30}, {&(0x7f0000000200)="3a37a60c6e6a38236e19c730afead945e8078b0331196c526148747a09b5980d5cd9ebdd7ea0b72e4c46d3fbb5fa8ee5f7c5fe25d3cf506ff3a5fccdc052", 0x3e}, {&(0x7f0000000440)="f6b6e006033f301a73dfc5e55528bed795e4f665412648603ae4a9ad7fe9f27dde69cf1645dec599d05df8433c2ec065ad5f1036f1cf75e6c2440b51de9bcd94f685560ed75df4b83b213b7986467109dfde0c3c56bdc225de4995efd7991f27b7d6c4c0071cc2ca5260e18b5b88572d1e8815cb29e2cb994721039a91cf59686531df00ed85c1ad4f7e1f43ad5f4e86bb69fff5f232cc0adfccfc15df51e9f83b87fc5c17725aebdf251fb785ef9e3d61c2ecc5d6ab8cc5d2e24281f6e4300786d7169f36596d9bc4a8b605a720fd9c99bbabd6a64f97c7af26abbf0dcdf7dceb", 0xe1}], 0x4, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000000c0)=0x5) fallocate(r4, 0xd, 0xffffffffffffffdc, 0x40) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x81, 0x8001, 0x4, 0x6, 0x40, 0x5, 0x6, 0x9, 0x7, 0x2, 0x4}, 0xb) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0, 0xa6, &(0x7f0000000540)=ANY=[@ANYBLOB="5800000000000000140100000200000000000000000000000000000000000000000000000000000000000000000000000000000000af98c39c1035b110c4d3ea1d00"/100], 0x58}, 0x0) 03:46:30 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x8000000}, 0x0) 03:46:30 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40049409) 03:46:30 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0xffffffffffffff49}], 0x1, 0x0, 0xffffffffffffff75}, 0x2000000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3146.984166][ C1] net_ratelimit: 20 callbacks suppressed [ 3146.984176][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3146.984979][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3146.990015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3146.996387][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3147.001729][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.018915][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:46:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) rt_sigpending(&(0x7f0000000040), 0x8) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033bc7a0b21865b517bb5356daead1d1edc66c7a0f59acd83f5f67ba03765fda303a8f15df58a8a5148474eb64cd37802b48be828cca610495081e252d5bf3b5738e7c"], 0x58}, 0x0) 03:46:30 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x20000000}, 0x0) 03:46:30 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c500000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3147.234473][T23626] rds_sendmsg: 7 callbacks suppressed [ 3147.234519][T23626] atomic_op 000000003f6d6f8b conn xmit_atomic 0000000016d46f7e 03:46:30 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x460800, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x2, @ipv4={[], [], @multicast2}}, {0xa, 0x4e20, 0x7, @ipv4={[], [], @remote}, 0x3f}, 0x1, [0x100, 0x7fffffff, 0x2, 0x9, 0x20, 0x7fffffff, 0x5, 0x5]}, 0x5c) [ 3147.295808][T23624] input: syz1 as /devices/virtual/input/input216 03:46:30 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x40000000}, 0x0) [ 3147.349157][T23638] validate_nla: 13 callbacks suppressed [ 3147.349166][T23638] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3147.476542][T23643] atomic_op 000000006ab376fa conn xmit_atomic 0000000016d46f7e 03:46:30 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x48000000}, 0x0) 03:46:30 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x100, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000180)) 03:46:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3547, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioprio_get$uid(0x3, r1) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x58}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x5, 0x3}, &(0x7f0000000240)=0xc) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f00000002c0)={0x6, 0x6, 0x8001, 0xdea, 'syz1\x00'}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e24, @rand_addr=0x8db}}, 0x40, 0x85}, 0xfffffffffffffe47) 03:46:31 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3147.620289][T23638] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40085203) [ 3147.684303][T23638] __nla_validate_parse: 12 callbacks suppressed [ 3147.684313][T23638] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3147.800229][T23656] atomic_op 00000000df75902b conn xmit_atomic 0000000016d46f7e [ 3147.853349][T23665] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:31 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4c000000}, 0x0) [ 3147.895494][T23666] input: syz1 as /devices/virtual/input/input218 [ 3147.912859][T23665] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3147.944136][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.950065][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3147.956080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3147.961886][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xd4d9, 0x40) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x2, 0x40, 0x2, 0x7, 0x100, 0x7, 0x7d, {0x0, @in6={{0xa, 0x4e22, 0x20, @rand_addr="12834cf15a9cdb59a97770ca4eef4701", 0x2}}, 0x101, 0x1, 0x3, 0x7, 0xffffffff}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x46, "f1236f0c5185a96dd1413c297631c5e7d667e1bfa663c0d62eff4e40f0450f05f33f4357d37ace64d845f6798a512ffdee08c9ceeca42afb3769aa300be00206918bde8ee902"}, &(0x7f0000000280)=0x4e) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:31 executing program 5: r0 = socket(0x1e, 0x805, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:31 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c600000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3148.091860][T23677] atomic_op 0000000014ae0e0d conn xmit_atomic 0000000016d46f7e [ 3148.208710][T23686] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000000000000000003e5a1f889862a926ea6300000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000b48f14395a1505bb8a1eccde15090542558068b6bedc035731609e8187f2eaf56b5e207c90"], 0x58}, 0x0) 03:46:31 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x60000000}, 0x0) [ 3148.270257][T23686] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:31 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4008556c) 03:46:31 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x7, 0x8, 0x7fffffff, 0x80000000, 0x200, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0xff, 0x7fffffff}, 0xc) listen(r1, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x800) [ 3148.449669][T23665] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:31 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000000000000140100000200000000000000000000000000000000000000000000000000000000000000000000006600"/88], 0x58}, 0x0) [ 3148.504948][T23702] atomic_op 0000000023b687fb conn xmit_atomic 0000000016d46f7e [ 3148.525073][T23665] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3148.569837][T23707] input: syz1 as /devices/virtual/input/input220 03:46:32 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x68000000}, 0x0) [ 3148.739750][T23686] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3148.756582][T23721] atomic_op 00000000c3d3fd01 conn xmit_atomic 0000000016d46f7e [ 3148.787337][T23686] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:32 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x40000101, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x8000, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x0) 03:46:32 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="5800000000000000140100000000000000000000000000000000000000000000000000000000000400000000000000000000000000ffffffff0000000000000000000000626f7ec20000000088fe655636b4429802640f1d70ce1963d9d690d56890baf88ad750793eda"], 0x58}, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)="89226c4efb54ca94e64dac660c155d75977d70210daa8a50b039eb34fd7c2155212a3b8e6049fe7dae3c5a0be2c57a2e92c9d9bca7067eb13f61f596785ff3aa98036403333641da1e003ff18fc1440002523f22ba7d6d5e84b9c69c1ae7c93d986682997b18eff3003807feb96e7504b07131746c4733952fcdf76d5b46f25893a8a58f1925234943a3a734809ce75d401c6b4b5d66af0f2f1a4e53464f4bd5801cd3af36f83b62a839d3730e32adf18589421795722a3d65f0e47d3a7e31704615bec9432866aa358f95", 0xcb, 0xfffffffffffffff9) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x400000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) write$FUSE_LK(r2, &(0x7f0000000440)={0x28, 0x0, 0x3, {{0xfffffffffffffffe, 0xffffffffffffff00, 0x2, r3}}}, 0x28) keyctl$read(0xb, r1, &(0x7f0000000300)=""/184, 0xb8) 03:46:32 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x101800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7fff, 0x0, 0xfffffffffffffffb}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r2 = socket(0x11, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x3f, 0x5, 0x1ff, 0x6, 0x0, 0x6, 0x9}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) socket$inet6(0xa, 0x80000, 0x2) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 03:46:32 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6c000000}, 0x0) 03:46:32 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000000000000000000004000000000000000000000000000000000000000000000000008d93b79a87ca00"/94], 0x58}, 0x0) [ 3149.027908][T23733] atomic_op 000000000e787093 conn xmit_atomic 0000000016d46f7e [ 3149.091038][T23740] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3149.138708][T23740] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3149.175784][T23707] input: syz1 as /devices/virtual/input/input221 03:46:32 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c700000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:32 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x74000000}, 0x0) 03:46:32 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x100) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3149.317056][T23754] atomic_op 000000000de3e214 conn xmit_atomic 0000000016d46f7e [ 3149.441262][T23760] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3149.474188][T23760] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3149.603237][T23740] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3149.628526][T23740] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:33 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40085618) 03:46:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r2 = semget$private(0x0, 0x3, 0x40) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000000)) semctl$IPC_RMID(r2, 0x0, 0x0) 03:46:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7a000000}, 0x0) [ 3149.723451][T23760] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3149.754650][T23760] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3149.773999][T23770] atomic_op 000000002053ecc3 conn xmit_atomic 0000000016d46f7e 03:46:33 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000180)=0x63, 0x4) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029cf7000fd0000000c001473797a0900000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000084}, 0x8000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) accept$nfc_llcp(r1, &(0x7f00000002c0), &(0x7f0000000200)=0x60) [ 3149.825066][T23772] input: syz1 as /devices/virtual/input/input222 03:46:33 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = dup3(r0, r0, 0x80000) write$rfkill(r1, &(0x7f0000000040)={0x8, 0x5, 0x2}, 0x8) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3149.990334][T23783] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfc000000}, 0x0) 03:46:33 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c800000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:33 executing program 3: execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000340)=':]%*cpuset!wlan1systemem0ppp0\x00'], &(0x7f0000000500)=[&(0x7f00000003c0)='^:eth1bdevselinux}\x00', &(0x7f0000000400)='.wlan1bdevprocposix_acl_access]\x00', &(0x7f0000000440)='trustedppp0cpusetmd5sum\x00', &(0x7f0000000480)='-\x00', &(0x7f00000004c0)='/dev/audio\x00']) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prctl$PR_GET_TIMERSLACK(0x1e) rt_sigqueueinfo(r0, 0x3e, &(0x7f00000000c0)={0x16, 0x1c, 0x100000000}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5820000000000000070100000200000000000000000000000000000000000000000000000000000000000000000000000000000000a3c990c23bb30892b93eab17b6031000"/88], 0x58}, 0x0) [ 3150.156287][T23788] atomic_op 00000000e229c0f5 conn xmit_atomic 0000000016d46f7e 03:46:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfe800000}, 0x0) [ 3150.407582][T23772] input: syz1 as /devices/virtual/input/input223 03:46:33 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept(r1, &(0x7f0000000180)=@l2, &(0x7f0000000080)=0x80) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x10080, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfec00000}, 0x0) 03:46:33 executing program 3: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x22) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x1ff, @rand_addr="01f30a8082c66f31fad2f798c64b1ce7", 0x8}, @in6={0xa, 0x4e23, 0x7fff, @ipv4={[], [], @empty}, 0x6}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x2bb7, @loopback, 0x8}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x9}, 0x8) r2 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000040)={'vxcan1\x00', 0x7136}) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="58000000000000001421000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7c71535084d6171e6c3f1166780a5b9725211d7ccbf13ecc9a0bad36a751328a4b3b5eeffba22425b615d7d110ae86fb30369c8163cc7b079858ea9a458c92ce3067c94591379c6ae49bc530b32d80ee45390308a3a015eefd645779957079fe518c09b7c54f8a61e"], 0x58}, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000280)={0x45e0, 0x81, 0x9, 0x4, 0x5}) 03:46:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4008af30) 03:46:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfeffffff}, 0x0) 03:46:34 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) 03:46:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="733bff1070eb7f615800000000000000140100000200000000c6d1e6601bfdbaefcbcba443644d39dc00000000000000000000000000000000000000000000000000c90a0000ffe9000000000000000000000000f1ff000000000000000000000000000000000000a5c4365248583fe64c9c47f484d467ff4c837dc1f767"], 0x58}, 0x0) 03:46:34 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000180)={0x7, {{0xa, 0x4e21, 0x8, @loopback, 0x4ca}}}, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xff000000}, 0x0) 03:46:34 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340c900000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4008b100) 03:46:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000000000000000000000000000000000efffffffffffffff00000000e3ffffffffffffff00"/88], 0x58}, 0x0) 03:46:34 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) fdatasync(r1) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) write$cgroup_pid(r3, &(0x7f00000001c0)=r4, 0x12) 03:46:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfffffffe}, 0x0) 03:46:34 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000000000000faffffffffffffff00"/88], 0x58}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="87aefc8400a0ac1d18d79a42edb11424fcedcf5d4ac874bf846ebfe7d6ca860fb3771b7beb14a99c86199922a2269c2115b3c7d2321fbf7973e4e75e27a9b668a597fe5550b523b17006f24195f2ad0bfbf4f71f99b1b4760f1aaf7fc080ab49", 0x60}, {&(0x7f0000000340)="ce096cf9dd51d7d16d845472fde8064c37c85e5ff0b38324332c41d3d17fa2bc20af8132ab3498bc7d97ba43c6d99510177a81b81440b8a202151093cae71fed05582a59818578abe4f3f0e215d479e1e7e942cddce10b003ec057b353459813636cf511ae020dfadc4596d7e7c8c7533b1beaf782dd4b8700f61bf7c55c54c09462aa564c7e009e7256f85f0f7a0d0768e500f37b619130966195a4ebdfc045540603461cc143b324127c9c41d4213d0e7f15c170c3f8d72a994a6c71623e95ba3544", 0xc3}, {&(0x7f0000000040)="8da3aa66a48e24ef855bd638615685c4646e2074cdf413", 0x17}], 0x3) [ 3151.337684][T23853] input: syz1 as /devices/virtual/input/input226 03:46:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bdbf79b492a31a4f3e0d85132a31efc9dd796c68a1a247244b450aa3e274fc27ea88502bfb92b5976a0e7de9937aedf9106a3b0517e121e8065ad326c337d73fcc0eba60b9bf828da68f20ab042d84901d44b030c7732be7e8b7bb5bfa3ce0bc10739fa62e07659657770b1fec14941c8fd3e93c789eed6b87c8a399ec9fe6b2cd5bc979821e0d601b701887a2c95d6ead99260e603e70f48921fcb86c0c39433b88afb98a747862579b6e690512b13a237365c3668d402d360fd31aca57f8a47a2cbffec662a4c9fa", 0xf6}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x8000, 0x0) renameat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000100)=0xffffffffffffff80, 0x4) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000002c0)=""/173) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0xfffffffffffffff9, 0x7f, 0x206, 0xf, 0x7, 0x0, 0xaa, 0x8, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x6e}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000004c0)={r2, 0x3, 0x6, 0x8dd3, 0xfb, 0xb2, 0x1, 0x10001, {r3, @in={{0x2, 0x4e24, @multicast2}}, 0xfffffffffffffffb, 0x809, 0xd2e, 0x400, 0x2}}, &(0x7f0000000580)=0xb0) syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000140), 0x4) 03:46:34 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x100000000000}, 0x0) 03:46:34 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = msgget(0x2, 0x0) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000180)=""/179) r3 = socket$inet6(0xa, 0x80006, 0x1) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x84, 0x2) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x2, 0xffffffff, 0x2, 0x800, 0x59, 0xf98, 0x0, 0x200, 0x1ff, 0x9, 0x8}, 0xb) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x84100, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x6, 0x1, 0x1, r2}) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r3 = gettid() ptrace(0x18, r3) 03:46:35 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4000000000000}, 0x0) [ 3151.702139][T23853] input: syz1 as /devices/virtual/input/input227 03:46:35 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340ca00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:35 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x94, r3, 0xc20, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffffb}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}]}, 0x94}}, 0x80) accept4(r1, 0x0, 0x0, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x101000) ioctl$VT_WAITACTIVE(r4, 0x5607) [ 3152.104136][ C0] net_ratelimit: 18 callbacks suppressed [ 3152.104146][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.115753][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3152.121676][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.127527][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:35 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x400c55cb) 03:46:35 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xa0010000000000}, 0x0) 03:46:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x26, 0x6}, @timestamp, @sack_perm, @mss={0x2, 0x1f}], 0x4) bind$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000000000000800010000000000000000c800000000000000000000003600000000000000000000000500"/88], 0x58}, 0x0) [ 3152.342364][T23912] input: syz1 as /devices/virtual/input/input228 03:46:35 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340cb00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:35 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x100000000000000}, 0x0) 03:46:35 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0xfffffffffffffff9, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x50ffe, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3152.550702][T23912] input: syz1 as /devices/virtual/input/input229 [ 3152.568386][T23920] rds_sendmsg: 8 callbacks suppressed [ 3152.568444][T23920] atomic_op 000000003c2b577a conn xmit_atomic 0000000016d46f7e [ 3152.605174][T23923] validate_nla: 11 callbacks suppressed [ 3152.605186][T23923] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:36 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) signalfd4(r1, &(0x7f00000000c0)={0xc27a}, 0x8, 0x80000) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffffffffffffffe, @local}, 0x10, 0x0, 0x33b, &(0x7f00000002c0), 0x0, 0x8080}, 0x0) 03:46:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x401845ff) [ 3152.735749][T23930] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3152.743973][T23930] __nla_validate_parse: 11 callbacks suppressed [ 3152.743991][T23930] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:36 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x200000000000000}, 0x0) [ 3152.824113][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3152.830035][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:36 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000000000000140100000200"/88], 0x58}, 0x0) [ 3152.884495][T23941] input: syz1 as /devices/virtual/input/input230 [ 3153.013470][T23923] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:36 executing program 5: r0 = socket(0x1e, 0x805, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) setpriority(0x2, r1, 0xffffffffffffffff) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) listen(r2, 0x0) r4 = socket$inet6(0xa, 0x80006, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x6, 0x20, 0x9, 0x3f}, 0x10) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) [ 3153.059893][T23951] atomic_op 000000005877c19b conn xmit_atomic 0000000016d46f7e [ 3153.076366][T23923] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:36 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x8, 0x52f6aef29bed08d6) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000280)={r1, 0x29}) r2 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f00000000c0)=""/181) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:36 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x300000000000000}, 0x0) [ 3153.201996][T23941] input: syz1 as /devices/virtual/input/input231 [ 3153.202693][T23930] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3153.224212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3153.230049][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3153.234142][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3153.235973][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3153.284316][T23930] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3153.365155][T23968] atomic_op 00000000956d5726 conn xmit_atomic 0000000016d46f7e 03:46:36 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x400000000000000}, 0x0) 03:46:36 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4020940d) 03:46:36 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340cc00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:36 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x38) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:36 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, 0xf) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="586f7d68cc000000000cd04fad7226e38d90912def697200000014010000020000000000000000000000000000aa6b818a3043324118faf10eeb000000000000000000000000000000000000000000000000000000000000000000007c6b3f577863bb6b185c6d23eeb1953017caed2cb0379d1fbf03344a83f5cdf8269fde6f6faa17f8ff5360dae16b6a502de9f6ea6148076c90695d320be62161f82bdb9d2692757a19276c501d6202398bb39bd4406c40644dcdbbe1e55a5ceaad34ea0c43668914ddf75de6fbbe383ef0dabe40edf8e3329242593a43390680f713a61e31106ed596c1d8111ba59c358281b582e085220f6f66a2b6218a48936add16035853"], 0x4f, 0x80}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x1, 0x4) r1 = accept(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000140)=0x80) sendmmsg$sock(r1, &(0x7f0000001e80)=[{{&(0x7f0000000440)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000080)}, {&(0x7f0000000500)="777cd75806552cdb177198aa2479a47bbe0ce6ab8534e4bb9d2e7deecdf8f3ff4c539d15217cbdde58c90dd6adda44ec50942cf8cf30ea940457b431bd56b5a35229929ea0b1da50e6aa1d187e", 0x4d}, {&(0x7f0000000580)="ace742a33765ef71", 0x8}, {&(0x7f00000005c0)="07b99db3ca72f51846857a32ca0216c04bc52b5707cabbac2f5e29777639c3578aa7a951400503dc8df33888541fae027d8a37dd3f6b6c4e78d51540c90fd19a9696786b288de64b769c03bfec204c74f838ab0c7ac9d7147d4e9672c373aad63bb96368c390274741c96f50889bf5fa09f6986acb36ac959bd879c067f490a02113f646eae7dc114466854431ba37e028881d9e601f5338b07cb9815b4ce36b93deb3be6d76f52eb19d51f3fab9331e597f35c329b033e8efb574781a8dada2b07512a555b25b2ca5aeb97f68b16a27a48dab6863aa634b9d", 0xd9}, {&(0x7f00000006c0)="9e4ac31a3abfa3c5a5355700bc622d63f67a26b8ac5d99f4db36c7a3abc60d01f8b3d1e2a8cc19b83e75ed4b8f70f347d4cc18533ed0a4a9f631fb0af53ee3602e883a55b125836c44ffaeed3f72b763bab03f448170", 0x56}, {&(0x7f0000000740)="338b3ea52fe227764716c2a99cbc484c", 0x10}, {&(0x7f0000000780)="2689f0bbdcfe92534f1877fd8d37fd4cee2cbe8e08808b2a8afc90fe05f8f673bfe8d021a307a6ebef36ab7254", 0x2d}, {&(0x7f00000007c0)="67148bee71a95fbc42ec2d62291b7b2f031aec8840ac3f1c9130d462366e9e0060dccf04c30ac0d8fee790c1b17bdfca2b114fcee2ecfd24eda16a3da19220a3aac6495ecb04b6596716d9468b32bc7a34c0b3f6a2699d40a345395c40cd308b2017f1efa7c526c9d447c1cd2853eb629c51029759bba98acbafdfd2eb883e1a68fb67a3694a57", 0x87}], 0x8, &(0x7f0000000900)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xe5a}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3ff}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0xd8}}, {{&(0x7f0000000a00)=@l2={0x1f, 0x1, {0x2, 0x2, 0x8001, 0x5, 0x2, 0x2e}, 0x3a, 0x7c}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)="5f88901f40d7efb55398c9c1a525d1e960465a665e30929987eb7857a18e7b9f9ce00d1facdc4779ca6cce9669f305185bb6971146d5b3099bfcf01dba149d639cbc240f7eb811aaf40a8b888f5c18c28413428cc339dd500a2ecec8da626c1917d2fac1febf4f00", 0x68}], 0x1, &(0x7f0000000b40)=[@txtime={{0x18, 0x1, 0x3d, 0x2e}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x30}}, {{&(0x7f0000000b80)=@isdn={0x22, 0x2, 0x3, 0x1}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)="d35ee33d263d697e6e4c49e0b6efb7b9ee625d9c69b1bbe3db37989e40fdd51e790d76c70cfcf019c7c647d27701478a43bd604f2aee94cd9f264d59956c78adc89a0c7c11d1d0a7510fa514d8e909ebd253c68fc9", 0x55}, {&(0x7f0000000c80)="cc018bffdd71f0ec5801e6df030dfb5a46d83ae27fe71558d34d2e8f9a176ab095c1736b8d4682b6c98d11cb75f1fd7321989778afe497894c1af79aabdfa0437f971f039647bd5dc7122723e1557904c21681d0c48f7df6d338b52a6596ed2a072834ed69a9415bf1a53cb03a08b5a2a8f90381fc4f45e8e3271ae877b26f88c25ff3cf504176f808887c597d40ac7d62aabff868cb724035c0c7", 0x9b}, {&(0x7f0000000d40)="ee29fdc392e11e3e51c0aa1f2d6ab7a436e2b4979dcc45b7ac2e24b54ae16113dfd4bb0fdf698361b50118ba6613f5d0c894296769541974bd89151c761308b0422a760893775d9819387aea828719ff35559bc87a39bc31be7b452255b507dc81b0793c98e32e41e4718e3c9d1eca7729dc82385898208772e3d5716c325b0b2f6defbd24967b50ab6b07b8507896bc4e2d548b0b437bb8b87e77", 0x9b}, {&(0x7f0000000e00)="dc787d67e3de71c41f6c53f5d5b52c5b0badb8c598b7d1e52d769ec790d5338c5222e313c9b749d976291bf6584b7e8dc37182b96c76ab85313c12a0e482c47d8729be083a72bba8a7cd38a52f3e8e78180a4bf7743bb7945ecbe112d815a82836c5ba76ea314029eb6de4cdf6cdd20e0002a58926ede04df6bba2ed7dcf2fab23c94e2aec40202d285e79304166410d1b3f64ea028ad8b9cbf07bccd3127b65d345d14939a69f31", 0xa8}, {&(0x7f0000000ec0)="3da4004f80d15c4ace4db92572ec4f3e765b24c928d66af21b78874306d49b8691d9", 0x22}, {&(0x7f0000000f00)="f3705beffdc31d4ed3e5fad3d4ecd806d0855b04141bd79995f5a6ecf04c38782f4b25f733368f9c98c2daee2867087b662a89ee54a2e4a1aff466801983ff9679ac1fce7789f24aad295826489b45f66cda4984c623b6ae571e63f6c976b437994e7c29ec0499c8c08c81ef4387da19a42e21187be0e138cbb4f2db", 0x7c}, {&(0x7f0000000f80)="396f849ce0a1d1ea6a8c3f5685c026d83958b94eca8f933e4ddb1c28a82500388a7eafc97c8c6b0204b96963b805abf837a4ed2cacb25bdb4af637169392b98069b3d86bf724efc21c7c6d465c", 0x4d}, {&(0x7f0000001000)="b9c08ac82749f55928fa42e98354506bf9a67fc334f3f89e08fd1eac58fe6b2a9e1cc0864791e09b44b03d0fe996898e81cc0d4ca7b3155389bd80c9aa47230ac290d24417ffdc2ca0b088e7128d3b", 0x4f}], 0x8, &(0x7f0000001100)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xb4d9}}], 0x90}}, {{&(0x7f00000011c0)=@l2={0x1f, 0x7c, {0x7fff, 0x33a, 0xb4e, 0x401, 0x400, 0x2}, 0x3, 0x5}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001240)="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", 0xff}, {&(0x7f0000001340)="67c1eea176ad33d6f35b20f0b010669c60e1b0188828d35157044cee5d4a17d6d0bb6409b15c43332f067cc780e3eebf3094450a380fd08a2670ac2e339026da298bae97cd9f0504afc4a243de9eddeacb4022790496acc179e407", 0x5b}, {&(0x7f00000013c0)="a68c30528277544a24a94039d39b73202c2112d611d0a04e65d41b847ac2d187f75088dd83186838dbf2d999f14e1e081f18ce6dfd0810bc25ca16e6bd46392fe88ab5125d29a9efbfe92e9309676042f1b0ca1c063cfb00903b7bafaa0b90024653d7dcd44bc813ac390a888f8fe7f703f123bad2a4f06ae9d74b5dbee00724a0d2d8146b0e008493300604476cdfc6", 0x90}, {&(0x7f0000001480)="e6e93688c90fc8ee98f3aad309c322af4d05495684c6a54b98c058e4e0d649d102c1b54f62e1e5d24734cbdfd18b021c85987ff329fa41c103a8bb2763be123369c67376d2e7d5ce1669628290508376fd5165c70f459a8b5fd7e2d743d3f0969572bf32e1b872fc386c37434f74d04541e4a99d628830f4e442ba8e8d429379b011940d5e2105de6c74c01d57073ca0f958724a0d11dfb8d403d44f5d3359131c11595de166b052969c7587dab146c067905be81d432ea211fc14", 0xbb}], 0x4, &(0x7f0000001580)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}}, {{&(0x7f00000015c0)=@ax25={{0x3, @default, 0x7}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001640)="498542086e52898e25adae60091198c43cd0ee44d283693d02d8168515b96fbb0a12fc3e517d6cc9e21215cf9d05c870bc0287c1cb815a3a1ea9befc4aa71e6b04027711f972e1f6356f54183f157e49899557e8eee99e550e29c0d7a0a45df9bb15329354a366544109d8aca754db8dfc8dc5eed2b6da6d3a3de9a44e0d26191e42e4e51e19db22517de47890af9e3ab28537e86c65b8abcd1c281c47a9ebd4b2f5596cd170b3", 0xa7}, {&(0x7f0000001700)="d29f05a564134eddbac2f05092500c5b34f4a30b1638d1e60490811a97384f6503366475385de4c1b3def863e61575f4d97b1464c47c86e2e195f194dfbd12a9", 0x40}, {&(0x7f0000001740)="24cdf4adeed1cf87e6be19add03fa11067ea18d443d81f552c870ff10b00192e7b824984cc9eaa414945632816fccc68282a673239d8ff00f74d7f23bf1f50b4fe4425cd673ca62d10669a5deb7976128fb5938cc33f83c15bbcd6e9c9b44eff91faf648d84e4024a6acec7ec4fe3b0f4307a2035b394852d8c1eab2cd0ac8fc4076360d26243217e7d36c588876b77323549773e6c44eb7e17fc8062de7bdae1130d56723", 0xa5}, {&(0x7f0000001800)="e5be27bb11d5c85967f9703d743a864b4e4b8af302e808eed2ac08594b754d96ccb275e3ddfcfa03c3b7977d15503095d825606675beb685f48f8d36224ccba0c7b523982747da793866cef25781e6bfb0d5e24ee22b1dca883509be6b8c7ef779c4d3a155648fede8", 0x69}, {&(0x7f0000001880)="be83de2ea8ec9c8622915df918a48a122db5222c670b3fe3f4df4f7762d595669526fb8ca7fa97f9c58b83a61a6feacec294c11d4325f09120d49d917859b17f49a4feba0784633e8bdcb53f188de89a0bca0536b4c84d1331703880c039447b8ae1bc92ae34d1992d24084da8084472f29f0bcbbb15c3c3c85220826bfc8149096575af83b1b57e6e5814bd3b941199fba78fd0121c9d72c42a3264cd7d34d8de3585ae", 0xa4}, {&(0x7f0000001940)="960f2915ded7b18305945c2970eaa359b4b3d988ac4bcb671d8bdec9f0fd20f37ebc89a34fde50b325430323e76f465f9d501a0cc4ab0eadcf1a076ae47be906a17c9fd88a18721853293fed4b785ca3fe77ff73c6b55de8ff17d75defaa59f91473f56a3551fb06235f81742fc0f8f8f8ba1635681051757016be373dc49f5ba4e72b44c5afbfba5719741f5f72bd6f8cd3409fe86a97f6cdb0578656fc00389a928079c15f6c069f51192be5782032347e2ded1d2931622c732a1f31bec4b958134b9fb4030abe1119352205d8125de795f98d31780f3a7d4bf1a002183b3983e318071ec790cae885af9286161e0fa1f8e46a", 0xf4}], 0x6, &(0x7f0000001ac0)=[@mark={{0x14, 0x1, 0x24, 0x216f}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xa1c7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001b80)="2382d98d41bef6b1c469797cf573fcc7a375c499e991bb0566384d8d850dc91ef48075d15b567150a2a3a5177645f93f8389af8c8eb08b3b97034fa5e67fed4573beb73374656e2aa1203dd7106ef82dece9791b7490174c54215f6eb6719b2af89d8798bce15efef2e83782ecc1a47c2b7db111d8ff34cf34540b51b8f10a281e745661592e4e001bd0a28dfe226e6279a611c5223047d4d115a754c6dc2605c1b4438fe29657863cfea8ae3763c2018a9970543715c1ca006f0c2273199fa8a063defd120c0ee4", 0xc8}, {&(0x7f0000001c80)="5a5780aa7f787810138d846a990b7a5c9b7ead2382315b692c9edeb41db3dafc37d76094e9fda33e50eee2b2085f2bd187dd9c99e2612beca77f4aa96a17f4971d79dffe40c5a4cbe3f3b76e796379e8e7d40931385bb50fbf417962ce2104ab11b7b771969c28585406e004bd2b9739b5418c24d0f0078e44e9b82075def1b7037e6e2b3911dadb43123e556b4a949ef960b4bdd77ea00ebc1f98778793b4bfaf89c3354738a56da2a027c5dae8f889b422c44cbdee44d1db51c64bac2cd75382502bb7c08606746d39b71e", 0xcc}], 0x2, &(0x7f0000001dc0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x100000001}}, @mark={{0x14, 0x1, 0x24, 0x200000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0xb4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xb2}}], 0x90}}], 0x6, 0x11) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x9, 0x3, [0x0, 0xad, 0x4]}, &(0x7f0000000340)=0xe) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000380)={r2, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) 03:46:36 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0x3a, @remote, 0x4e22, 0x0, 'nq\x00', 0x2b, 0x200, 0x5}, 0x2c) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3153.588062][T23979] atomic_op 00000000f22dec4d conn xmit_atomic 0000000016d46f7e [ 3153.625450][T23981] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3153.635651][T23984] input: syz1 as /devices/virtual/input/input232 03:46:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x500000000000000}, 0x0) [ 3153.693020][T23981] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3153.755762][T23983] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3153.790044][T23983] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = msgget$private(0x0, 0x4) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/45) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3153.850297][T23984] input: syz1 as /devices/virtual/input/input233 [ 3153.916184][T24003] atomic_op 000000004aca842c conn xmit_atomic 0000000016d46f7e 03:46:37 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x311000, 0x0) write$UHID_DESTROY(r4, &(0x7f0000000180), 0x4) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) read$alg(r0, &(0x7f0000000200)=""/71, 0x47) accept4(r2, 0x0, 0x0, 0x0) 03:46:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xd58b}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x0, 0x3, [0x8, 0x2, 0x5]}, 0xe) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3154.106771][T23983] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4020ae46) 03:46:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x600000000000000}, 0x0) [ 3154.193688][T23983] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3154.310852][T23981] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3154.335340][T23981] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3154.385158][T24022] input: syz1 as /devices/virtual/input/input234 03:46:37 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4, @local}, 0xfffffffffffffe00) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3154.440673][T24026] atomic_op 000000008a67b826 conn xmit_atomic 0000000016d46f7e 03:46:37 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340cd00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:37 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x700000000000000}, 0x0) [ 3154.644310][T24035] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3154.652582][T24035] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3154.681218][T24022] input: syz1 as /devices/virtual/input/input235 03:46:38 executing program 1: r0 = socket$kcm(0x10, 0x10080020000005, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r4 = request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='TRUE', 0x0) request_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000002c0)='TIPC\x00', r4) r5 = getpgid(r3) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0xc20b04de3197e538, r5}) prctl$PR_SET_ENDIAN(0x14, 0x2) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:38 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) listen(r0, 0x8) 03:46:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x800, 0x40202) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x40445637) [ 3154.790069][T24044] atomic_op 0000000063f36b12 conn xmit_atomic 0000000016d46f7e 03:46:38 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x800000000000000}, 0x0) [ 3154.925468][T24053] input: syz1 as /devices/virtual/input/input236 03:46:38 executing program 5: r0 = socket(0x1e, 0x805, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0xa0000003}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) [ 3155.177863][T24067] atomic_op 000000005412a75f conn xmit_atomic 0000000016d46f7e [ 3155.258833][T24035] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:38 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x2000000000000000}, 0x0) 03:46:38 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3155.314325][T24053] input: syz1 as /devices/virtual/input/input237 03:46:38 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)={@empty, @broadcast, 0x1, 0x6, [@empty, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x1b}, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x28) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_0\x00', 0x0}) connect(r0, &(0x7f00000001c0)=@hci={0x1f, r2, 0x3}, 0x80) listen(r1, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3155.357383][T24035] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:38 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="2e00000000000080ed000100008000000040431dd028d58a000300f88000f01700d0bd000000000000006b44b2def619cf09e36172e62d81d33b1d1b04e3919bd87f3e69022933b77579e3d3cf9325eda422522f4d2c5e421301a850c5765ff906c2eb82a9f402d2bfcfccfe158699039eac4361e0cbf609dab8bfa395ecefbb09ddb93e9a6e831e06f36bb082b90848db3dd88b762b3007294ba1924d8f1388452bbaf9f69f686e2a055212cb3a45c224e12be6c7053eec083496e6fa37", 0xbe}], 0x1}, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0xe8, r2, 0x402, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcf77}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbe}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24dbd8a3e6dd1ab87b5c1c5be3099bb247098f52c83f28979e09b7bd3712ad8b79aad4a4db92d4c6ca799dcab177a3b40af5b3b4d0cf70a06756b49f6514f697f2a9cf88acca38cbea527148f15319769a014659477ae230c9b69b8dbf85f0bcf5982a621c69f06bde854fd023eb586888b33f38590339f0e3d123dae196f274e902a41574e6fc2a7cc55b641a65065f08d5bf082a1f24ecf8950e9e67d810ae987bba", 0xa3}, {&(0x7f00000002c0)="2a7032bd48c598ae92a3bd6050353e697b3d3b00232b0ffc484cd2ec964e2797f151001612db8426137275adfe87e1fdf105c357cc4e0dd3f32a3c99519d4931598bbcd60191c48fe6ead73a4fbca4bd04603d72e63381fe5ec3eb57440b45034e0871d9ea3890c032bb742914d6d479121dc559927ff9451116ba704b3e166ae99be881f6a89c", 0x87}], 0x2, &(0x7f0000000380)=[@iv={0x50, 0x117, 0x2, 0x37, "fdd5cacfeef791253163d48c9ca70a507513cdab6cd8051bff0ef7cf976a7eae8cba5eebc1c182fda2a4d88c67a5320a04f43889cb3c82"}, @assoc={0x18, 0x117, 0x4, 0x10000}], 0x68, 0xd635344f2809fb93}, 0x48000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x18, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3155.489538][T24080] atomic_op 00000000821e2847 conn xmit_atomic 0000000016d46f7e 03:46:38 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340ce00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:38 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x405c5503) 03:46:38 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4000000000000000}, 0x0) 03:46:38 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:39 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000180)={0x55, 0x5, 0x800, {0x8000, 0x200}, {0x9, 0x7db229b8}, @rumble={0x6}}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3155.751904][T24095] input: syz1 as /devices/virtual/input/input238 [ 3155.825535][T24102] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3155.857089][T24107] atomic_op 000000004e6d597f conn xmit_atomic 0000000016d46f7e 03:46:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10880) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="07253dd4decfe23aac18c6055d1a8f517df754ef7355ca89fc26a98894c1b3d16d3c207f96f98bbda3997edb87eda2824933bbaffd443a93758d3bf7629275b7ef718c02f6236972af444c71891b6a7345789f316410ec6d47dce8f927df868020146e75d099bc44a70375cb72abcffbe000753ee1a31ad5fd1f4800f40d998eefc1dfff70aa28c7f2c619cab45f4233b9ca797398b2246225696b8ac80d2e6a9a5d4636374c6517ca01d247e15191567e95fcf287cd5bd571815393beaae59d9e96d7165d027b72b0aabee16bf2f9fc2ee97d", 0xd3}, {&(0x7f0000000100)="7ca9", 0x2}, {&(0x7f0000000200)="ffb642518c1eecf5d7d4e2ba17ac51e0d4677ffba82d7782055a804c2728142c54b8914ca9415314e4b793bad778e57669e9dcc287094e5ee241806f0a008600be8f123d549d3be699c04ea790d5a95280db1712de892ec226f3043242db9df492c19d700bda08913b796e8bd1f37d5b0504c4fd70fc26c8c32750718346cb6ae41419f4e59cb73ae323eed842e17b6458f4084199822b5406a65fee55a7b3e9d56ed2", 0xa3}, {&(0x7f0000000140)="eaedf45543d0d33edfda86afcfd504593d7573864d02e5d766a886fdc5e2b94851be3527f038354ab084289d2f8e9939ac4fe1df6fe584648ca723bf5c88", 0x3e}], 0x4, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/88], 0x58}, 0x0) 03:46:39 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4800000000000000}, 0x0) 03:46:39 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3156.113313][T24095] input: syz1 as /devices/virtual/input/input239 03:46:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000000000000140100000200000000000000000000000000000000000200"/88], 0x58}, 0x0) 03:46:39 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x4c00000000000000}, 0x0) 03:46:39 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x3) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:39 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x84402, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3, 0x5, 0x5}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:39 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340cf00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:39 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80000000}, 0x17) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:39 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6000000000000000}, 0x0) 03:46:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x406855c9) 03:46:40 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6800000000000000}, 0x0) 03:46:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"/88], 0x58}, 0x0) [ 3156.797394][T24157] input: syz1 as /devices/virtual/input/input240 03:46:40 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x2, 0x1}, 0x4}}, 0x10, 0x0, 0x2a9}, 0x800000000000) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:40 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x81) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x10000, 0x1, 0x7}, 0x6c, 0x3ff, 0xfffffffffffffffd}) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f00000001c0)) 03:46:40 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x6c00000000000000}, 0x0) 03:46:40 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000017c0)={0x0}, &(0x7f0000001800)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001840)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000001940)=0xe8) getresgid(&(0x7f0000001980)=0x0, &(0x7f00000019c0), &(0x7f0000001a00)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001a40)=0x0) r8 = geteuid() getresgid(&(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)=0x0) sendmsg$netlink(r1, &(0x7f0000001c40)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400400}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000100)={0x9c, 0x3a, 0x200, 0x70bd28, 0x25dfdbfb, "", [@nested={0x8c, 0x84, [@generic="4b70986357d0343a1cbf68e1a345c611b740d1c94e2dd3bca09b5689dd55f95378002ac54859bfb4cab58a84f5e9fe1f49de12c9c0abb46bad822ee5a88000ccd0afcd2a1bf63a9266d4bb22d2ec91adea0a1e2df31b9d2b25f70832180002334b0e92debd54ad35afd917f9b00adb6a86ab4261efc05da024f7296864bc865e6119900905cdee"]}]}, 0x9c}, {&(0x7f00000002c0)={0x224, 0x25, 0x210, 0x70bd25, 0x25dfdbff, "", [@nested={0x20, 0x37, [@typed={0x14, 0x58, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, @typed={0x8, 0x54, @u32=0x1}]}, @nested={0x19c, 0x6f, [@generic="4ebad716965271bd1a7cb52e489ecd10339ffa2354dcc1066b7bbc14f71dbb494f580da10430007232ab8fc770f7ab6e31df8ba248e197763bf484cc09128a3b832ba388645a754c1cfee5b4d7b6a092851cc2bb7ac9cfafedc9c4692145c6b64e55425b1cff27bfb456009e7c76e98559f062705c33789902f26b3a902f8c2fd3b4de0c074ecbfbcd641aeb964a5565541386aa54a01bf4a221f8a3ca7b038d6b0b8a234d699b87d50f107dc7f7e7d72ef16f9d58fd016303e7a7868a1bb7d400000dac99e1284e456e9342db40afd751b4cf6aadccd4be4d4c8916ceeb70", @typed={0xc, 0x74, @u64=0x6}, @typed={0x88, 0x8c, @binary="9652e913386ed3591401ee091d82cfd55fe82f9607bde874c6f1f42aa7485e6ddbf12a993d483fac49011060ab802c037e5eb0c07788925ae9020902d93ee0eb6567f79c5bfbbb9e9e80eab7d71f2462806c5e8b786be02cae2ca08a9ac2aadafd8f0825ef1713d2d86ecb92bed140ab77fbcc3b0fe04ec4f7eefa1a7b2036789ebb47"}, @typed={0xc, 0x6d, @u64=0x6}, @typed={0x4, 0x93}, @typed={0x14, 0x53, @ipv6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @typed={0x8, 0x66, @u32=0x58cbd7f1}, @typed={0x50, 0x6a, @binary="e8aa30bfd2bd85d5d338347426d501f31caad7bfd831805e6f9675274f42b50e087da05da6ecb7fd5765815497b32772b0f2bf5439c04a1f9b8e1e30fedfe57e5d34d3bde6eaf10695"}]}, 0x224}, {&(0x7f0000000680)={0x1118, 0x10, 0x40c, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x1024, 0x30, [@typed={0x8, 0x34, @u32=0xfffffffffffff000}, @typed={0x8, 0xc, @uid=r2}, @generic="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", @typed={0x8, 0x88, @fd=r0}, @typed={0x8, 0x21, @uid=r3}]}, @generic="c806e1877029ab9ff86524f2fa173e0c609303dbe8dee47f24b409c39ab32d485868c9a5fd03bf6e8f12a38119d070df7f95a3003d176efbcce3172349b6266745cdbb1198f15fe957a6c7f8f45dbfac7480bbfaf80fe74875d284473ee1005ab2d21d21603c855dfc079525db1234b3c509405f8981d9118d464fa09390716075728aefdefac16664d12e3dc9a7d8be7a25bcf628eb360770bd2dd54793da4f56a98812428ac7f878a3643fa28e15e6b3cb9ccb240086bf7856e07fce6a50f27569307e56235b187c773214250679fc30b62d730c079cbe01837dc01a2aac8a68cbba0e"]}, 0x1118}], 0x3, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}], 0xd0, 0x40000}, 0x20000000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x40, 0x4, 0x4}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x6}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000e5ff13010000020000000000000000000000000000005f900000c0b12a23d732a1670000000078a500"/88], 0x58}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000080)=0x1002) 03:46:40 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7400000000000000}, 0x0) [ 3157.319227][T24157] input: syz1 as /devices/virtual/input/input241 [ 3157.384134][ C1] net_ratelimit: 20 callbacks suppressed [ 3157.384142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.394280][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.395666][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.401420][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.407280][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3157.418671][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3157.457962][T24188] RDS: rds_bind could not find a transport for ::ffff:0.0.0.6, load rds_tcp or rds_rdma? 03:46:40 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d000000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:40 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x4090ae82) [ 3157.518709][T24195] RDS: rds_bind could not find a transport for ::ffff:0.0.0.6, load rds_tcp or rds_rdma? 03:46:40 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = accept4$x25(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x800) ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000100)={0xf}) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x80) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x100000000) 03:46:40 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x7a00000000000000}, 0x0) [ 3157.658051][T24203] validate_nla: 7 callbacks suppressed [ 3157.658061][T24203] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3157.719897][T24200] input: syz1 as /devices/virtual/input/input242 [ 3157.760403][T24208] rds_sendmsg: 6 callbacks suppressed [ 3157.760472][T24208] atomic_op 000000005b1bb930 conn xmit_atomic 0000000016d46f7e 03:46:41 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x8000000000000000}, 0x0) 03:46:41 executing program 5: r0 = socket(0x1e, 0x805, 0x8) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}, {r1, r2/1000+30000}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000000000000000000000000d00000000000000000000000000000000000000000000000000000015000000000100"/88], 0x58}, 0x0) [ 3157.865571][T24191] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3157.894326][T24191] __nla_validate_parse: 7 callbacks suppressed [ 3157.894337][T24191] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3157.991589][T24203] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3158.048319][T24203] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3158.089371][T24228] atomic_op 000000008b79c839 conn xmit_atomic 0000000016d46f7e [ 3158.137005][T24200] input: syz1 as /devices/virtual/input/input243 03:46:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) 03:46:41 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80001200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x600, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x810) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3158.344804][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3158.351211][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3158.358272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3158.364624][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:41 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x8, 0x7, 0x1cc5, 0xfff, 0xfff}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000004c0)={r2, 0xfffffffffffffffb}, &(0x7f0000000500)=0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)) r4 = memfd_create(&(0x7f0000000040)='-vboxnet0\x00', 0x4) alarm(0x9) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000100)={0x3, 0x251, 0x3, 0xfffffffffffffffa, 0x7ff, 0x0, 0x12, "00bed88b006ded3ddce2a6dea94c88a35a9dc85c", "99937767dc2749b923622699cbcae14d4cca4a85"}) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000340), 0x2) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000000000000140100000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040ddcda71e5cfbc705d90000000000"], 0x58}, 0x0) 03:46:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x80044324) 03:46:41 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfc00000000000000}, 0x0) 03:46:41 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d100000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3158.484873][T24239] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3158.504627][T24239] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3158.642745][T24250] input: syz1 as /devices/virtual/input/input244 [ 3158.717469][T24254] atomic_op 0000000068ca1c7d conn xmit_atomic 0000000016d46f7e [ 3158.734269][T24257] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3158.742396][T24257] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfe80000000000000}, 0x0) [ 3158.862626][T24239] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3158.879348][T24250] input: syz1 as /devices/virtual/input/input245 [ 3158.887723][T24239] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:42 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x400000) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000180)) accept4(r1, 0x0, 0x0, 0x0) [ 3159.002884][T24257] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3159.023189][T24267] atomic_op 0000000091fde6cd conn xmit_atomic 0000000016d46f7e [ 3159.055014][T24257] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfec0000000000000}, 0x0) 03:46:42 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:42 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x80045430) 03:46:42 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) pause() keyctl$link(0x8, r2, r3) listen(r1, 0x0) r4 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3159.285993][T24279] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3159.301220][T24279] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:42 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d200000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3159.371899][T24280] atomic_op 00000000e45bfda6 conn xmit_atomic 0000000016d46f7e 03:46:42 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xfeffffff00000000}, 0x0) [ 3159.485811][T24288] input: syz1 as /devices/virtual/input/input246 03:46:42 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x8) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/5) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3159.584383][T24297] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3159.592770][T24297] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3159.637946][T24279] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3159.654836][T24300] atomic_op 00000000cabcf782 conn xmit_atomic 0000000016d46f7e [ 3159.684577][T24279] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3159.696656][T24288] input: syz1 as /devices/virtual/input/input247 03:46:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xff00000000000000}, 0x0) 03:46:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x4000, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @remote, 0x7}, 0x1c) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000040000000000000000000000000000000000000000000000000000700"/89], 0x58}, 0x0) [ 3159.935936][T24311] atomic_op 00000000d01a6048 conn xmit_atomic 0000000016d46f7e [ 3159.967029][T24297] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:43 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x1, 0x8) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000002c0)={{0x4, 0x0, 0x10001, 0xef6f, 'syz0\x00', 0x4958350b}, 0x0, [0x607, 0xab6, 0x3, 0x1, 0xe53, 0x6, 0x1, 0x5, 0x6997, 0x0, 0x3, 0x1, 0xffff, 0x4e, 0x9, 0x6, 0x669f, 0x4, 0xfffffffffffffff8, 0x101, 0x4, 0x6, 0xfffffffffffff47d, 0x80, 0x8, 0x1, 0x0, 0xfffffffffffffff7, 0x8, 0x6, 0x3, 0x6e4, 0x2, 0x6, 0x0, 0xfff, 0x0, 0x100000001, 0x27, 0x0, 0x7, 0x941c, 0x7, 0x1f, 0x10000, 0xffffffff, 0x9, 0x3, 0x56, 0x6, 0x7, 0x5, 0x6, 0x5e7, 0x6a29, 0x7, 0x0, 0xc9c, 0x0, 0x6e, 0x80000000000000, 0x80000000, 0x3, 0x51, 0x81, 0x100, 0x7fff, 0x9, 0x80000001, 0x0, 0xffff, 0x5, 0x80, 0x1, 0x1, 0x0, 0x7, 0x400, 0xffffffffffffffe1, 0x4, 0xfffffffffffffff7, 0x80, 0xfffffffffffffff7, 0x2, 0x101, 0x1, 0x1, 0x6, 0x3, 0x1, 0x9, 0x9, 0x2, 0x6, 0x865, 0x4, 0x6, 0x6, 0x0, 0xd8, 0x2, 0x1, 0x4, 0x3, 0xffffffffffffff0f, 0x1, 0x4, 0x0, 0x4, 0xffffffff, 0x5, 0x7, 0x3f, 0x8000, 0x4, 0x1000, 0xef, 0x8, 0x8, 0x6, 0x1000, 0x3df, 0x20, 0x1991f794, 0x4, 0x6, 0xfffffffffffffffd, 0x7], {r2, r3+30000000}}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:43 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x800454d2) 03:46:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0xffffffff00000000}, 0x0) 03:46:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0xffffffffffffff04) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3160.181472][T24324] input: syz1 as /devices/virtual/input/input248 [ 3160.249717][T24325] atomic_op 00000000b12b2018 conn xmit_atomic 0000000016d46f7e 03:46:43 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0a6866cad284af381f57651a96e76c6d0ad9914dc925b30f8b41697943157a453"], 0x58}, 0x0) 03:46:43 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d300000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:43 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000180)) 03:46:43 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3160.491462][T24342] atomic_op 0000000038caf69b conn xmit_atomic 0000000016d46f7e 03:46:43 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x4) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000180)=@req={0x7b3bb68f, 0xfffffffffffffe3b, 0x7fff, 0x200}, 0x37b) listen(r1, 0x0) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:44 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = msgget(0x0, 0x400) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/2) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0x2, 0x1}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x20040800) 03:46:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000040)='%\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb692, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, r1, 0x0, r2, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x20000000000, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 3160.724246][T24324] input: syz1 as /devices/virtual/input/input249 [ 3160.828380][T24364] atomic_op 00000000394da789 conn xmit_atomic 0000000016d46f7e 03:46:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x8004552d) 03:46:44 executing program 5: r0 = socket(0x1e, 0x805, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000180)={0x3, 0x3f, 0x2}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) fsetxattr$security_capability(r2, &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x0, 0x7fffffff}]}, 0x3, 0x2) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x101, 0x9, 0x7, 0x8, 0x9, 0x9}) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000002000000000000000000000000000000000000000000000000000000000000000400"/80], 0x58}, 0x0) 03:46:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3161.061430][T24377] input: syz1 as /devices/virtual/input/input250 03:46:44 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d400000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3161.242391][T24377] input: syz1 as /devices/virtual/input/input251 03:46:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0xfffffffffffffec3, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) 03:46:44 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:44 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="58000000000000001401000002000000000000000000000000000000000001000080000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000b"], 0x58}, 0x0) 03:46:44 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000878754d0f9fed94181116f97828be4556f2ac6751df0d57db3fb1dcbd8b26fd09aa8b15d916b7632ca5e6275313c99c0f286c17b722b31e07df73e8e66c3626fed3b1822a5421e1354e46a8ab4f629c1c45dcfee3eb66fbc52288caa9c550e0ddf88dd74011eaac3c79ccacf349180e21105d7bd9375e795eaa9c1ed864b58ac0c0318454b9a6b35ec6d8a924e9df77613916ce7e0a13f4380590073a655d3910219a5a7fce054de09f33df8ed5e206314ffdf95aa7606d23ed2393f", @ANYRES16=r2, @ANYBLOB="120327bd7000fddbdf251500000028000500240002000800030000000000080001001c0000000800010012000000080002000080ffff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20000010) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000040)) 03:46:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x80085617) 03:46:45 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:45 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80080, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xfffffffffffffffd, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfffffffffffffe35, 0x0, 0x7f, &(0x7f0000000840)=[@mask_fadd={0x0, 0x114, 0x8, {{0x8, 0x1}, &(0x7f0000000280)=0xa5, &(0x7f0000000340)=0x800, 0x3, 0x2, 0x4a6, 0x4, 0x0, 0x8}}, @cswp={0x0, 0x114, 0x7, {{0x3, 0x5}, &(0x7f0000000380)=0x3, &(0x7f00000003c0)=0x8, 0xee9, 0x1, 0xfff, 0x1, 0x3d, 0x7fffffff}}, @mask_fadd={0x0, 0x114, 0x8, {{0xffff, 0x65}, &(0x7f0000000400)=0x3, &(0x7f0000000440)=0x4, 0xffffffff, 0x7, 0xffffffffffff7fff, 0x1f, 0xc, 0x2}}, @fadd={0x0, 0x114, 0x6, {{0x3, 0x3}, &(0x7f0000000480)=0xff, &(0x7f00000004c0)=0x80000001, 0x5, 0x3, 0x7fffffff, 0x0, 0x25, 0x7ff}}, @mask_fadd={0x0, 0x114, 0x8, {{0xfffffffffffffffd, 0x80000001}, &(0x7f0000000500), &(0x7f0000000540)=0x1, 0x4, 0x3, 0x6, 0x7fffffff, 0x11, 0x2}}, @cswp={0x0, 0x114, 0x7, {{0x8, 0x4}, &(0x7f0000000580)=0x5, &(0x7f00000005c0)=0x97df, 0x6, 0x8, 0x5, 0x1ff, 0x8, 0x100000001}}, @zcopy_cookie={0x0, 0x114, 0xc, 0x7e2}], 0x86}, 0x4000000000) [ 3161.785684][T24417] input: syz1 as /devices/virtual/input/input252 03:46:45 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) accept4(r1, 0x0, 0x0, 0x0) 03:46:45 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:45 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d500000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3162.084535][T24417] input: syz1 as /devices/virtual/input/input253 03:46:45 executing program 3: openat$mixer(0xffffffffffffff9c, &(0x7f0000001640)='/dev/mixer\x00', 0x10000, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001540)='/dev/snd/pcmC#D#p\x00', 0xbdb8, 0x402) clock_gettime(0x0, &(0x7f0000001580)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000015c0)={0xa1b, 0xff, 0x7, {r2, r3+10000000}, 0x800, 0x3}) r4 = geteuid() ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000014c0)) r5 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0}, &(0x7f0000001380)=0xc) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x60, &(0x7f00000013c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}, {@index_off='index=off'}, {@nfs_export_on='nfs_export=on'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@euid_lt={'euid<', r4}}, {@euid_lt={'euid<', r5}}, {@obj_role={'obj_role', 0x3d, 'keyring.'}}, {@euid_gt={'euid>', r6}}]}) syz_open_dev$sg(&(0x7f0000001500)='/dev/sg#\x00', 0x4, 0x208600) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x80) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000180), &(0x7f0000000200)=0x14) recvfrom$inet6(r7, &(0x7f0000000340)=""/4096, 0x1000, 0x1, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @rand_addr="e9262171796989ef9caa8162ef91459d"}, 0x1c) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x2, {{}, 0x0, 0x0}}], 0x58}, 0x0) ioctl(r7, 0x3, &(0x7f0000000100)="2818fa960ce147a572ab8d74c246b911321f96d4c752abe8527d3bbdacb22b75d8854cf96dce8a341153351529ef9707c4834aa4b08477b3f8b6f866c3527416dda5a24173a249969e71c9e0fb29c2e0d0c3ef2916a2b848d6894ca36a7c3f831334a3cc7703b037618740") 03:46:45 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:45 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xffffffffffffff24) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, 0x20}) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0xffffffffffffffff) [ 3162.504157][ C0] net_ratelimit: 20 callbacks suppressed [ 3162.504165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.515771][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3162.521621][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3162.527557][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:45 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) r1 = accept4(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x80, 0x800) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000007c0)=""/203, 0x1119000}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000001e8007000000906479cc94e20003402c00000101000080000000000200f88000f01701d0bd00"/53, 0x35}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x281, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x40) 03:46:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x80086301) 03:46:46 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x234, r1, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44b5bec8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3ff, @rand_addr="0627359adfe5eb46dd94e1512b3933e5", 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x197, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @mcast1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa00000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc239}]}]}, 0x234}, 0x1, 0x0, 0x0, 0xc010}, 0x1) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) 03:46:46 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800000000000000140100000200"/85], 0x58}, 0x0) [ 3162.776538][T24449] validate_nla: 12 callbacks suppressed [ 3162.776548][T24449] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3162.854398][T24471] input: syz1 as /devices/virtual/input/input254 [ 3162.881482][T24478] rds_sendmsg: 6 callbacks suppressed [ 3162.881541][T24478] atomic_op 00000000352bf0fa conn xmit_atomic 0000000016d46f7e 03:46:46 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x2040) accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80800) sendto$packet(r1, &(0x7f00000000c0)="46327ba8f20f650313fe124a22b193001b6c4c4b2187faefd0c6a8af47ae78b7ea66efaccc43ff00e35d0eb81c4fff2933c48bdaf8bc41961e605deacfb1476aa1bdbeceaaf3ea9f74d8228251c4be70f5447897be51117b883be69c28b654588e1868", 0x63, 0x4004050, &(0x7f0000000200)={0x11, 0x16, r2, 0x1, 0x1}, 0x14) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="580000000000000014010000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e1d68a08dbfc883b2a9e1df172263924449b11e8f196e6088a41c5a6bce9c8e586176e75318aa6a4f6000edd6e1d7ce996149705163e04523c41c89af1e2df27ec8c47604e72cddf53e92c46491974e62e020233b0d3595c855debccccf37d05210fb2c31cf82d014bdb0ba45447b2c03"], 0x58}, 0x0) [ 3162.929539][T24449] __nla_validate_parse: 11 callbacks suppressed [ 3162.929548][T24449] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:46 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:46 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d600000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:46 executing program 3: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) shutdown(0xffffffffffffffff, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) fstat(r0, &(0x7f0000000340)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xcb2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xd9f4}, 0x1c) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x920, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) [ 3163.205000][T24494] atomic_op 00000000cbc68bde conn xmit_atomic 0000000016d46f7e [ 3163.224154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3163.230031][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:46 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3163.315619][T24471] input: syz1 as /devices/virtual/input/input255 [ 3163.329816][T24500] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:46 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0xffff, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/141, 0x8d}], 0x1, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x10001, 0x2, 0x3}) accept4(r1, 0x0, 0x0, 0x0) 03:46:46 executing program 1: r0 = socket$kcm(0x10, 0x10080000000000, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20800, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3163.404774][T24500] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x8048ae66) [ 3163.491642][T24509] atomic_op 000000009aee8864 conn xmit_atomic 0000000016d46f7e 03:46:46 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3163.624132][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3163.624191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3163.630109][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3163.641718][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3163.683668][T24521] atomic_op 0000000025f9badd conn xmit_atomic 0000000016d46f7e [ 3163.742416][T24524] input: syz1 as /devices/virtual/input/input256 03:46:47 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2d, "6e595265dc52803a880a5e55922df248bd91c144e346ea3a2de407e6bc869e3585f81e50d730f0321ba67fc921"}, &(0x7f0000000040)=0x35) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0xff}, 0xffffffffffffffb7) 03:46:47 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3163.842267][T24500] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3163.887004][T24500] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3163.952225][T24531] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3163.979224][T24531] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3164.066822][T24535] atomic_op 00000000781fcbf1 conn xmit_atomic 0000000016d46f7e 03:46:47 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d700000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:47 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3164.203710][T24531] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3164.222409][T24524] input: syz1 as /devices/virtual/input/input257 [ 3164.244590][T24531] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3164.362483][T24549] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:47 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc0045878) [ 3164.416440][T24552] atomic_op 00000000c7ecc0cb conn xmit_atomic 0000000016d46f7e [ 3164.478202][T24549] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:47 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x500000000, 0x0, 0x7ff, 0x80}, {0x2, 0x18, 0x0, 0x80000000}]}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x9, 0xfffffffffffffff9, 0x7}) listen(r1, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3164.630870][T24560] input: syz1 as /devices/virtual/input/input258 [ 3164.844464][T24549] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3164.858976][T24549] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4004e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x2004) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x2) dup2(r0, r1) 03:46:48 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:48 executing program 1: r0 = socket$kcm(0x10, 0x400000005, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x81c2, 0xffffffffffffffe0, 0x9, 0x8, [], [], [], 0x8, 0x3, 0x800, 0x8, "c16d22e70d32db69c239af2f2333ffdb"}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:48 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x28100, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x1132, 0x1000, 0x1, 'queue0\x00', 0x7}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x420040, 0x104) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r3, 0x0) r4 = socket$inet6(0xa, 0x80006, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x0) [ 3165.015354][T24573] atomic_op 00000000210e114d conn xmit_atomic 0000000016d46f7e 03:46:48 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d800000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:48 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3165.080916][T24560] input: syz1 as /devices/virtual/input/input259 [ 3165.242896][T24592] atomic_op 000000001193f5ee conn xmit_atomic 0000000016d46f7e 03:46:48 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000240)=0x9, 0x4) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x7, 0x8, 0xfffffffffffffff8, 0x20}, 0x10) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x28040) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x6) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000001c0)={0xffff, 0x7fffffff}) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000200)=r4) accept4(r1, 0x0, 0x0, 0x0) 03:46:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc0045878) [ 3165.319217][T24594] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:48 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) clock_nanosleep(0x4, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000040)) 03:46:48 executing program 3: openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0xfffffdfd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) 03:46:48 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3165.404516][T24594] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.520662][T24606] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:48 executing program 3: r0 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r0, &(0x7f0000000540)=ANY=[@ANYRES32], 0xfffffda2) fcntl$addseals(r0, 0x409, 0xa) ftruncate(r0, 0x0) [ 3165.571794][T24608] input: syz1 as /devices/virtual/input/input260 [ 3165.592226][T24606] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3165.594717][T24616] atomic_op 00000000b4df4d99 conn xmit_atomic 0000000016d46f7e 03:46:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:49 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/180) accept4(r1, 0x0, 0x0, 0x0) [ 3165.863125][T24594] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3165.893071][T24594] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3165.912779][T24629] atomic_op 000000002053ecc3 conn xmit_atomic 0000000016d46f7e 03:46:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3165.978616][T24608] input: syz1 as /devices/virtual/input/input261 03:46:49 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008913, &(0x7f0000000080)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:49 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340d900000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc00c55ca) 03:46:49 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000280)={0x1f, 0x1f, 0x3, 0x6ab0b995, 0x1, 0x7f}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x64, "785d5036c73a255bdd6e5de450ac754a15b92944ba4369987297d248fb896f9e799c697c50ea958fd3bca942e6147e9e1c2269f9564c7715281c6050abe8628f82a97b102d7b4041460ff2ecad09517e0548854f08414625ce7ad2336060c4e39bb1aa41"}, &(0x7f0000000040)=0x6c) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r3, 0x7, 0xac, 0x4, 0x8, 0x4}, &(0x7f0000000200)=0x14) 03:46:49 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:49 executing program 5: r0 = socket(0x1e, 0x805, 0x0) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000240)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x3c, r1}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) mknodat(r4, &(0x7f0000000280)='./file0\x00', 0x8000, 0x3) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req={0x800, 0x39, 0x4b36, 0xff}, 0x10) [ 3166.485989][T24659] input: syz1 as /devices/virtual/input/input262 [ 3166.644296][T24659] input: syz1 as /devices/virtual/input/input263 03:46:50 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:50 executing program 3: clone(0x2000000017ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="a9df13ac1fc574626569f94cc3bee57052c6832c982ffffb01e2deff0f0069dd0500ec2ec5610ec63d00002ece87d5f8514cb9c397ba530d45"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:46:50 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000300)=r4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x5, 0x0, 0x9, 0x0, 0x1ff, 0x800, 0x2, 0x200, 0x10001, 0xf29, 0x4, 0xf07, 0x24, 0x68, 0x0, 0xd5, 0x7, 0x89, 0x7, 0x3ca, 0x55b9, 0x9, 0x0, 0x5e5ceb97, 0x101, 0xffff, 0x4, 0xd209, 0x7699, 0xffff, 0x8, 0x4, 0x8001, 0x5, 0x6, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0xc801, 0x0, 0x100000001, 0xf, 0xffffffffffffff54, 0x800, 0x6}, r5, 0xc, r6, 0x9) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:50 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc0106407) 03:46:50 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x18000) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000040)=0x1d000) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@ipx={0x4, 0x9, 0x200, "52136e846398", 0x7ff}, {&(0x7f0000000140)=""/75, 0x4b}, &(0x7f0000000200), 0xc}, 0xa0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100)=0x5, 0x4) 03:46:50 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340da00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:50 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3167.204245][T24699] input: syz1 as /devices/virtual/input/input264 03:46:50 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x4, 0x9}, 0x8) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r2, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r2, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000200)) [ 3167.309142][T24699] input: syz1 as /devices/virtual/input/input265 03:46:50 executing program 3: clone(0x100000, &(0x7f0000000000), 0x0, &(0x7f0000000080), 0xffffffffffffffff) 03:46:50 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:51 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 03:46:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc0189436) 03:46:51 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) accept4$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002400)=0x14, 0x80000) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000002440)={@dev, @remote, 0x0}, &(0x7f0000002480)=0xc) accept$packet(r0, &(0x7f0000004a00)={0x11, 0x0, 0x0}, &(0x7f00000094c0)=0x14) getpeername$packet(r1, &(0x7f0000009500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009540)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000009600)={'team0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000180)="b0332e00f1f467759290121dcf6e39bc621e801f5824de04a39c807b810f60a063629b8c748e66a699509d627dbbe84aa115a0a4878272b53e83066e5c06efd0d1157767c36a148a6b2217069b62316286d6173cb4f670e5c577f7335e5c0af8ac4578fa0a0984b529702a15991809fb00d0dabb4ac72d61bdd25294f8f7df9d140b54ce1d6a1116a491073213cfcac9471601", 0x93}, {&(0x7f0000001400)="29ca95a14c204f5c03326f7488e0ab53bda36ad42de3960093178aaba00c6ef6769a1ade395289d4188d64c74d8c00996567fe9545457f553cf1382568fe63cf2e079c9ad7de29a6bf887b1676043896b5fd49455c1debeb0a28654d956fbcc609930aeafeab0ee017a43d2a71d626599c7e131db754ca00895770fc3085db52c3e142cf2293cc74129ae8451bfb71388b5f43164550f3ba297f859e064c372f9b59f2987813d3bb731c7dedc0e2b7f7509f1bc95cd7d91c983752f09ffbdf437d98c936c0f6f8bc26a98347a943444d1539c8d0a4f2c5428472aa22023ce88904359fbf1ac0284bb39edad675af414bda4eebf13a46145b6a4b5cedffbcb59909a9e814d1dd7f0db15021d6f4aec99ce666a3ee4b4c39a2e40ea500423d1201db5bb797be61e010c07f4f80da3db28f7ca78b77094fc6b61935d12246f2997b815ca218676990847cf530f366705eb19ca774e3511332d45d28a345949476786cb085a72aa303184c2294cc8f77bd4eaa50bf8bf82e34e587163f76d98a3f55507116b336df535f8114e039d704521e3b81f6011c6ce5ec5926a85df7f3310ea7c018eac9a143c776d72574d2c0130b126921ed09e5912acb0e1481c19120f74baebc4bcaf5485eb0496a81f191f046b80f28dc549064317889c8036602672251b9d5484c250225e2e7d545ae77ca4e309e863d22987b119554b47b7afd32b30019d2f15f974d042c3c61d354c327c92474cb001a6c40b16f38263813a9a53a82abde9b21aaa9439a91531dfb4c4796b704cbe2ac5779e90cc04f2a3b2404dff13a7add0b0246a5542e4126f1645caa9226eeaa4a7b385a4ec40c316f748f877c3148c003a1703506cc9d2c2640e8331cd784b38bc0a3972fd7ce34d8fe6e34e8c42ef9dd81024d72ecdd8d02d923a5bc4e075bf8b5348f51b93a48373bd38125d71ccee04613a475d43d1e62308ae60cf1067508b58d4ef0db24bbe38e861c9f1c53209817c5a8ce09398657e8ebbd765ecc739f94f5d1b621459a06cce3b328fbdf4b6f200577cb61cee3ffd83af28295cf1b9940e02ba46886db92e6a766a82237ff50f553ef2d1242745e32f483531ce32fc839b3e63b7f2d01cf3306a462eeab8cf71228675bf37fd07c57f6ba734a7c828de6ec2db645b3565ae3d54bcc57c4e6a2d4a22c88e797c5da7c6fdf2edc2bb4241f5db1f1b01b40e3a6fe65547a3abf87ca88eaab709a01df381175ee1f1f940d3c435544acccdf6a3842c48fd36e43146bd163167f57a8728a8debdc733c3848a3381c82440e247f9c55a5025e666fc5893ab08581ada0b996ec6f289abb6ee2121a70cd191ad1b3d8a9f697919930180bcdd97184a7b432a1dd306d5ea84c4fcdfc4dbf0d7f1210973d3b2e8d120353f3f477e6965a1d9f59eb1e351ffdfcb8540d5e9d74bec6d731e7e1b29a8099bcdd085602cadc589ca5f2b9d0c91040e4e2201ffe429404057e2a40320f68ad241198642fa5001e92bf7abfb38acaff1d5b43a1f123f6e6d2e37948744993c8a88f0ccf158c8b62ce243205e95294e67f1ee638813c6211c20c3070f900ce8b4c72248aee52846f030a6f23da207b542cc87bf822d1a8aeab84729321cdba413eb680dee698cac72cb1cff9c85bb51b9b8d55dd2466aa93cd766a7f265651473a8f498d4ac46aff89dc46e7cbf008b1eafde3887592b21c15481e69a1715abe0f5248213c6a4640129b0bc5ce1c4424f1bba2fdb140b980b2a1d5c5f59b5785ce511a6f399d9b82ec343cfa8936e80ab88782453020df925872da10f652eddd42cbf88333da9221f76118f3d3b810884f492bf8322785c0e723c291d523e9a857aa8bee2837c8ececf03ca09ffe8308421ae24e85754007eb7673a2ba93d63a2023d30e03c007f6bf0cd6fbdd44642c0888bbb1379b671d49758bda282152e5dcd20d134bc4b1c144b78f838cdc3096c4ff595f091b5354a30aaed11185ad72665530d6eba2a12405a13fe6dd9d5048282be437239aef24ab02fd9b508d4158f03dbaddc4bb2c840f3c56985b520b766798413a3e66044ea687419b6205af907b73e78ef81093925526bd0d88c00668fb52a78dce094ab079545f9b993c5f5890c21fb87d09e92b0a408cb13932d3a029076e9db348c11b1e41d93e59f0a5ae93f23807c6dec1982845e203abb1c0cff05d3cc59d4dac46f9a058af846ce929931d239d7dd9dbb861c5542ff07d70387553f74afca849d883292c6b2db101d6fb3691c9e4df92df60d694a9c1b78f8f8e2d817082c286de27a6ee89965ede210910dfbd7b14f404c23b2e5ba3386136c7fcf10b56dfc8b7406ef8c193f58954a75d6388050939e6141ec9625cdc84caceaaf621fae18974087eeab42f7066f8d834faf9c3aefdbd49dd08e7eee474c076d6763b1927cdef9040ad4f992add57e88b222f8cc2d6085815ab1cbbdd59db59f66b0a60a1be3f17c8b9dfda4301441e7c318e2598d17662484d28f64f57fae6e5a0431f279cb6a275bfb3078a790e307294b9611e484af76529a42e62a290ab777bad9979fad6e147ae83740570cf22397e7930e38ebee1056626cbc990dae5351ad5dd36598e5a378a4aca48033f8a90c331e7972b360dbf24b6a116bcba5d7d7bc2e9c471ea523be78bfbaf95d25b87b1b44b15e37e403f99c142a6e62d6b350911e500d4dc2884cd047f8de1b8e152eb1a421ecbb4a87c0f98c017fdcb6f8aabe8fe4510255c87c084f63316a4eda1b8f9e101d84880df7ac8f8949d6f8193e532952bcb4632d4b7300840c9519383eac100cbe811a71fc43a2bcac1a25741ea2b4ae0177a1207e7bda1684fc03089cd56ad02c6c3e057ae977c2b8b2a7003b4542815bc7c785fe49db638a74738a1c265ff4babacf3f80e1b051200e0a671add31f666ceed238018baadef21d04930673bd2d0b4ffc9f5537447a6e6c22cac64d827a94071341a0ff632b22219d04ee98dfc66164cfe6e8c37c9ee82d46f92d7779a8b24a78e6fe7da647c450ac968542a0aa5c9a30353e923cbb7f852f974d4e02f85bdc1e99ef1e2e2bd07a4b8ed286ebc1b936a17cb3bd82efc6570cd89ce7c38cf74fded4e73c49c1eef802005390c8912570fbf131823c86c2a5d26f123bbc68e000ee6f681026d6b5a6806151604689308e8261305b696977914d858f40a1c88228809fe1572fb51f69ffbacaf03584c72b98dc6a449926331e6a27abc7383676ce42ca0bde08e324645e6bfc780326d205598046d2822af91d1eaedddc8dcc3a3beca048a845e269e96cc8a03a95f66ec5037d54bc6803ba4c146f9e67157c6c2318b67e307a46bf8de95358ece553f0f650606a974fba2508063d480dbf7c7d04da8e9aef4df5ad18a0dbb28f95c1f3aab0a18b2ddf48d870c827431fbb9b813de2deb9b298ad8ba1bfae107d3290b73de185bfbae8be06b5b06664afbc444f136d2cc67e05862f50e7cf0a847eeec2040e038a8853067c4c767ec33d543a7c78ace27c2c32d1581d2c84245e519fe721408831abb70d0420db897236611b6658124f66afe84b2158e338a0d15e6c7d2aa58f37a16f2c818ef3aba3c93645a923b359606077b0cb21bf23218dc9117ef7adbc930372a553a5f7449d91a4cf6c04da11b14f134c7b8da10870dda875dee25bb0da74720685c02a57f4ea1aad7081cceb3af625b8c4ebd5e1c64b69db3f4d7ac64efb5b06702f909ea88101a2d0695634fe20cff7025ea9c9a347596a2870fce8a99f024ed653894daed2f502afc6e2b12c350bd266dc04ce9b014dc7eb7edc3715fd2d0619ad6c85fb93f8c698ca7f828522e60ae0a3b99efe43761ea91efa55ef431dedb3754a1546832d31383beb0d8031d0175628e2fcc064e7b1d4acaeea75b8e8b15788b57ad22656ac7b05ba2fa75fd787874fafae105df71b5107d5c60ce89faea22e318020635e56bb5cfe8ccb81635d25838f473b6c5a5bb6a514e4db9ce63a559d91d15fddf6a9116c6716ccb9d9274cd30749a4e31bd55dee660a6c1bb88addc912304811a62a9e5e813c080929916f857bf547296fe1d9085d372fd41c59d62f1281a9ff81e0a9811885a556de7f6acf9a8c16aca7d3a82aea9c07804bc915210d87a6301494a615104590ef826c37431c2a8744c864c8b344376e9539c51e7a4ca236b07dbaea03355b679044ec930201c472e1e7e9bce92be919d4dd0b13e6e102acbdc0f32283ad94453d39ca065350fca4dc4521dbe9dc763a6079a8881e50261c7cff69efb78a679d0d6573531637c5f704b70eea5d8b7ae98f1edd3c37b5135ecda2472ebf339b45116fceff8afd3b049f51215aca5f88151f88dfa99c01528490a6d6d4628790110e6d3f588121b52fb07cddca51f598c283c6dd48285d797f06fe812d703eccba5466dae2c002b202a77e235443edb9de7736ab1f63301fbe7d6f18058c61bd97a784e77a9552340e7210ffd7573eab8817fc31256213381ebb7b14d8823b9bec1accc756b6297d644ea5f37601c6ebb903f5072d629a1114a2f138e6949f7f2e944dfdb0f45c12ed9f8cbd0765ca8356c397b41c23a1a9467383b852121d290ae9cce06abdaf844a0628e8631f6b5733488c101e90a1ffcf99def5e7be9a09ac4532e0848cedec276a43ebe7cceea065ca147f21bf9c3359f0ca4fd969df109cd099fe81f6d6b357d4eb4b66281523df63ff2244499f43bf32d08a5c46d8dfb9e537de088b98c2b76c417a82824cfd49f9bfc5c80dfbf4db865df8e385809cf8990b4d2df7d66dd77721508902374ab4590309081341221560fd3a7f53d0b93b41d55c2eafaa6c8b19d925be19713d5a7ee2d9850c67b212041b216c3f6e0a65623f48052cabb81b3a90d9023e8da7b7a4a5a99068e7718f0a784451f83ecff5e394658da858e23a8483ca4143cccf534aed242cc37505116f80353e20ea6fda35420283b7b0b855ed472be23daf25a956b2e101774455b45e9acefe7464fc46b6b4c3533aba284397fda6a92bf6089ee50b515ad02e249da5242eef1c275631a9b7a78222840e1441d987380453f8e57adbace563f8837117c70dce13bd5b60182e05769546431f0553ac7339bd123f338dbffd58b1b53eb7d531310deaea0baf6d12dbffd3f3f8939448556eff6a2b16774785e20b343a7abf5010bc9e7d5b24280293064f45c167825805dedce5d8c3207ef830022ffd31f0ad8845aa834bc7be3a5ba7c196628ee2e67261d7318e2b40877063a62bbe1abcbe49410b47fc1e7f876a931be9190d2dcd883fb21c462b8eb4c8bdc81760a99d8957a2016376d83268ba7ff88477216f588d7dcc7387d666686496efcf73d10220ae1ed99c3f761d08982bf5a8a35a5111d0c45f1eff3cbde126ee4ccfca35d0e43b48aa249dece3bc45b7e31cc429622c94b99f7d19c95ed4cb23ccca8298f92c9a562d5de1b15b466a95e7428999002b2d3a6af0a3ec284c96179415dcfefa3a6b0e4269587213124beb45d91f81a2bdfd20ae4fb41f2f8ed278322ce3c3e26eb1357f9c3ac515f93d5b95630826c5257925e07de05b466c4c33490e7892f1de9fddbe96cb0fa2280991f2b99c3fac7230d443f47c0a8d8647579b9d1dc087c56bf3fed0cb99796d7f47d07ea3e06b45c1808bc0a1ff27879babb5314a1648ad2059f8ed5e1b88bd63732a543039cf5ba2c9df5be258b2b77421310a899343db97fc8731d6c71f6c95104f0b0a04aa045e3bc59040e420ae717f9d84b31c9fa3090f93540294", 0x1000}, {&(0x7f0000000240)="7ed086534e0011270717fe6f8a100f80bbbcf48b445fa14c7e297ab25ccbe28b7cdb22b8cac4db694a7bd7b394925cbdaeeb9ca12467ff9f9237b1a658b07b875040d8addaa5a4666117e14f64c36ee37a0fe27e44b091d92476e0f96cc7b1b15686476dbd4b1b72052d64161672fa5c36df067bd0349439368040950f60bd0292766913cb3e65175cef", 0x8a}], 0x4, &(0x7f00000024c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x71cb}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x0, 0x9, "851a4b9430b108"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x6, 0x3}, @generic={0x7, 0xe, "e4c902bb8debf17698cc6f4d"}, @cipso={0x86, 0x27, 0x3, [{0x2, 0xd, "8520e757a14d4c2b23a092"}, {0x5, 0x5, "b63d6f"}, {0x7, 0xc, "cf3c3b0d26c6c3f34669"}, {0x0, 0x3, 'A'}]}, @cipso={0x86, 0x24, 0x2, [{0x6, 0x12, "91496a0853953030f0d757b4296b8ed6"}, {0x7, 0xc, "3416fa9ced1e19f2b050"}]}, @ssrr={0x89, 0x17, 0x3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @loopback, @local]}, @generic={0x94, 0xc, "feb036ed6439d669d31f"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @loopback}}}], 0x140}}, {{&(0x7f0000002600)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004980)=[{&(0x7f0000002640)="e1b8472f581320ba12b30798effc3c1e5be5ed8432be88a9a1e2ddde422a364eeed7f96a088aab0e2a4b9309e053a6a412e11f40663293182ce441c936b026da65fad3d4542031e6a93b3ff9afd784cdd7a0badeee910b8474d12923c2d6480836f7beb3cdda8e0a81daa98af6084facde33a7c669ff4b7a2094844de6885967ecc082c9c859d633eaa54ac9776f86593fc88757539dbf49adbfd327a06d7f0eaa25370aab969640475753b2cb8fafc4553a5a73590d90e6e8040ef63fde42a1c4e2bc22186b81bdc374f354eb743acc10b0a0d9d3a4425230ed7716a3a9cf1a8a7be01a8d087a9af30655ce7cde39e3", 0xf0}, {&(0x7f0000002740)="552e0db26c0c8b3b15ac344c4f949ba912aa63a50891750f64e034842b466800b5eca32e92bf40181daf61f799543aec68546652c1e0222373eea3e838e165410d3547f0c36a1a4a5e62aff3285f591290b2d7101433eb32e6b35319acf4b18e03865cfe65510765263c90d6d458", 0x6e}, {&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="99bf296407a0e737b1d73de314cddd4f0c675957fae2b142194df485ff46e3f29ea5f8615b8b5526734933b25c95ea40d0ba1f6658ebfcaed7376ccbcf2dbcc75e76b54924ad49fb005fa4e0f7bea4eb5135c2c250013576db978789eae7bdcfb382b1c17e0c7257ea3c10", 0x6b}, {&(0x7f0000003840)="7aa12553aa4a227b2ae28e3a0521be0c08136751dfea1b12a810135684bc53479d1bdfb7349ba71e438cc1a288202c43d979cc9267f1e08a457ab0eb3b6ebc465e489e2d51ab40e756d53e12504b517642591a3beb340210ec744c03", 0x5c}, {&(0x7f00000038c0)="fec957ad02dd0b1da3baaed37b367142370349a63c4763070fc67933810f15390ef137fa8250a16a78bc284e9d00c61e798410fa458594006bf196ccc0c2a109edbd40637ce7ad5635cfae54d0cc32880622bfa8761277a586fae47702abf808cd4ddb2f912db6f5862f9ade173ac89d3d2fd0eb0cbd041297eef816f2599c67f04021af0e45e6796c6141705a18a6c67908cc544dc4cf3604bec21e402f484041537192338090cbfeacabd738ec", 0xae}, {&(0x7f0000003980)="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", 0x1000}], 0x7, &(0x7f0000009640)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xf77, 0x3, 0x3ff, [{[], 0x100000001}, {[@dev={0xac, 0x14, 0x14, 0xc}], 0x7f}, {[@empty], 0x800}, {[], 0x9}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @remote}}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @rand_addr=0x10000}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}], 0x108}}, {{0x0, 0x0, &(0x7f0000009a00)=[{&(0x7f0000009780)="a5395d9820d336e2086fc595c5df1bbe6c996dcb29d1c08ae79267307df0779c648fed80248cb6131cbb422bd1228482fed2aa1e889312ad3553be98e74e5066bd52d6ee2dd09c6a91f19bf7005ee97cc2254f8b022a86169db181bfffab970bb7a60358b5b3987b8baf5e34501a0985500fdd50f5a50c2dbda8355ee100b5710ee6e70a020de1064350bd3b02258ca12425e2c9", 0x94}, {&(0x7f0000009840)="2aa8331d2a7ff2b3f216b3448f817a3f88b4ccea2e4f3dfdf5179cea04ac1cfcc0cf5e36e33fcf4ee719479000b65c6875212c48d5c8c06d9bb7", 0x3a}, {&(0x7f0000009880)="096c4f5e4802e6fec99dba06ad120149438206a6e08275314780d21077b8585e51a009b10ba5", 0x26}, {&(0x7f00000098c0)="d1863c65d56d614a5bd910763f89036ef596bf51f1a6f53f21e0aa34834355637efee403503e0fbf041c7fe57247e27d66ddec9c776cdf21637cf64fda859d1e74d48cb53e39fcd2f6c26b246306696298993a9fd00c2f7cab1176f7dad6107f5f542e01c1e34cdfd037cdeb7c87e18f9f28cf84d8565f8ede08b4d7eef79f8be4d532c4e4e531801e", 0x89}, {&(0x7f0000009980)="e71c09488b03c27e2c60", 0xa}, {&(0x7f00000099c0)="13571ee035c49cff2a5d", 0xa}], 0x6}}], 0x3, 0x8000) r7 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:51 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in={{0x2, 0x4e23, @multicast1}}, 0xffff}, &(0x7f0000000200)=0x90) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3167.784136][ C1] net_ratelimit: 20 callbacks suppressed [ 3167.784144][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3167.784174][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3167.789871][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3167.807463][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3167.813263][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3167.916075][T24734] rds_sendmsg: 7 callbacks suppressed [ 3167.916131][T24734] atomic_op 000000002bf8e541 conn xmit_atomic 0000000016d46f7e [ 3167.958569][T24742] validate_nla: 9 callbacks suppressed [ 3167.958581][T24742] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3167.988498][T24742] __nla_validate_parse: 9 callbacks suppressed [ 3167.988510][T24742] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3168.046570][T24747] input: syz1 as /devices/virtual/input/input266 03:46:51 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000001500)=@req3={0x8001, 0x0, 0x0, 0x7}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0, 0x335}, {&(0x7f0000000a00)=""/182, 0xb6}], 0x2, 0x0, 0x20f}}], 0x1, 0x0, 0x0) 03:46:51 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340db00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3168.210795][T24747] input: syz1 as /devices/virtual/input/input267 [ 3168.271766][T24754] atomic_op 00000000a7548dbf conn xmit_atomic 0000000016d46f7e [ 3168.311170][T24757] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3168.356672][T24757] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:51 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc020660b) 03:46:51 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/0\x00yFAtz\x9b\x88\xb3\a\x04\xd7a0x0, 0x3, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x3f}, &(0x7f0000000200)=0x8) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r3, 0x0) r4 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r3, 0x0, 0x0, 0x0) [ 3168.880206][T24772] input: syz1 as /devices/virtual/input/input269 [ 3168.899532][T24757] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3168.944486][T24757] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3168.948696][T24787] atomic_op 0000000081f543c5 conn xmit_atomic 0000000016d46f7e 03:46:52 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @remote}, &(0x7f0000000100)=0xc) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x40010, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x40, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in6=@mcast2}}, {{@in6=@loopback}}}, &(0x7f0000000200)=0xe8) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="0000ec3a"], 0x4) 03:46:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x800e0039d) 03:46:52 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3169.117239][T24801] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc0285629) [ 3169.172704][T24801] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:52 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) epoll_create1(0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x3) accept4(r1, 0x0, 0x0, 0x0) [ 3169.296892][T24808] atomic_op 00000000b36b51c1 conn xmit_atomic 0000000016d46f7e 03:46:52 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340dc00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3169.361054][T24812] input: syz1 as /devices/virtual/input/input270 03:46:52 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3169.464176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3169.554504][T24820] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3169.649371][T24820] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3169.673027][T24826] atomic_op 000000004ddb31ec conn xmit_atomic 0000000016d46f7e 03:46:53 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3169.720186][T24801] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3169.754468][T24801] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:53 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "532e077e24a10603", "c364c8f4a0e6cb0b6ba3471cbf0ca61e", "26dfa18a", "0dd92ad275e223dc"}, 0x28) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3169.841617][T24812] input: syz1 as /devices/virtual/input/input271 [ 3169.912527][T24834] atomic_op 000000002f17d6fc conn xmit_atomic 0000000016d46f7e 03:46:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000000)={@loopback, @rand_addr=0x8, @broadcast}, 0xc) recvfrom$inet(r0, 0x0, 0x0, 0xc2, 0x0, 0x800e0058d) [ 3169.968170][T24820] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3169.994130][T24820] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:53 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:53 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x0) accept$alg(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x2b, "e367c931f3c2a7de1840287a5099df0217ff7a59cc652faa8e016c18565f27cc3e3b3712956697c26f6510"}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000280)={0x0, 0x80000000}) accept4(r3, 0x0, 0x0, 0x800) r4 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000100)={0x400, 'syz1\x00'}) 03:46:53 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000180)={0x3}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) r3 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r3) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r4 = semget$private(0x0, 0x2, 0x84) semctl$IPC_INFO(r4, 0x1, 0x3, &(0x7f0000000400)=""/4096) readahead(r0, 0x8, 0x2) accept4(r1, 0x0, 0x0, 0x0) 03:46:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070") clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x80000001, 0x1e}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 3170.183240][T24849] atomic_op 000000001489247d conn xmit_atomic 0000000016d46f7e [ 3170.202970][T24851] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 03:46:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc06855c8) [ 3170.284782][T24851] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:53 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:53 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340dd00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3170.432437][T24862] input: syz1 as /devices/virtual/input/input272 03:46:53 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="a5d1827c999fefb337eeb05e6753ee851132de0485085e374c0f77c6140c3dfd1f11ffdf31d9e89aee7460003b7fde392ce40205026d759eade0a7784f4bdb6f835819f28e78334a7f107e8b3741de7718c52f269ba196451a2be668a0c320cd1f812a414a89ac6d"]) write$FUSE_LK(r0, &(0x7f0000001b80)={0x28, 0x0, 0x2, {{0x7, 0x0, 0x1}}}, 0x28) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x8003, &(0x7f0000000080)=0x5, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) msgget(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x20000, 0x200000) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x27c) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 3170.509859][T24868] atomic_op 00000000f929e604 conn xmit_atomic 0000000016d46f7e 03:46:53 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffd}]}) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x200000000058fe4}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") times(&(0x7f0000000080)) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3170.565354][T24872] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3170.573480][T24872] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:54 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3170.671776][T24862] input: syz1 as /devices/virtual/input/input273 [ 3170.838291][T24886] atomic_op 00000000e8fcbdac conn xmit_atomic 0000000016d46f7e 03:46:54 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0xc0945662) [ 3171.155514][ T27] audit: type=1804 audit(2000000814.479:146): pid=24876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir335259541/syzkaller.5BgclM/5629/file0" dev="sda1" ino=16961 res=1 03:46:54 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_hwaddr=@link_local}}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:54 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3171.276627][ T27] audit: type=1804 audit(2000000814.609:147): pid=24900 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir335259541/syzkaller.5BgclM/5629/file0" dev="sda1" ino=16961 res=1 [ 3171.419994][T24906] input: syz1 as /devices/virtual/input/input274 03:46:54 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340de00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000002240)='/dev/vcsa#\x00', 0x1000, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000100)={0x1, {{0xa, 0x0, 0x0, @rand_addr="e576c3dd084f311d5e903d1084f95262", 0xfffffffffffffffb}}}, 0x88) 03:46:54 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3171.645999][T24906] input: syz1 as /devices/virtual/input/input275 03:46:55 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x81, @mcast1, 0xaf}}, 0x24) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:55 executing program 3: inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000000) inotify_rm_watch(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)}], 0x1}, 0x2}, {{&(0x7f0000000700)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000000780)=""/181, 0xb5}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/134, 0x86}], 0x3, &(0x7f0000001940)=""/130, 0x82}, 0x8}, {{&(0x7f0000001a00)=@rc, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000001b00)=""/65, 0x41}], 0x2, &(0x7f0000001bc0)=""/130, 0x82}, 0x3ff}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001c80)=""/27, 0x1b}, {&(0x7f0000001cc0)=""/9, 0x9}, {&(0x7f0000001d00)=""/140, 0x8c}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/194, 0xc2}, {&(0x7f0000001f00)=""/4, 0x4}, {&(0x7f0000002040)=""/211, 0xd3}], 0x7, &(0x7f00000021c0)=""/105, 0x69}, 0x5bee775b}, {{0x0, 0x0, &(0x7f00000022c0)}, 0x2}, {{0x0, 0x0, 0x0}}], 0x6, 0x2000, &(0x7f0000005fc0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000007b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000007b80)=0x14) 03:46:55 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:55 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast2}, {0x6, @random="277154a82214"}, 0xc, {0x2, 0x4e24, @loopback}, 'bond_slave_0\x00'}) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x4000) r2 = msgget$private(0x0, 0x0) msgctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)=""/172) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0x0, 0x1, {{0x7ff, 0xffff, 0x9, 0x3, 0x29, 0x8, 0xffffffff, 0x6}}}, 0x60) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:46:55 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:55 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x10000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', &(0x7f0000000200)='./file0\x00', 0xe1, 0x3, &(0x7f0000000480)=[{&(0x7f00000002c0)="345657a871371c553ca621f3fdaf29de92e011161751668360a0a66833a6694598a0f14aac3196f70e4fdb8ffdba8af2efa2a49aef60201265200f3a8ba10b7dff0c3e27d054cc1e3ecdee838daf8a1659cd96", 0x53, 0x4}, {&(0x7f0000000340)="d0f9031bdd8623eb6687fac13dca9dd65574740d0427d45fb70dce1f298a2797fad15f09a36b31da510c78bf8ffd249bd0c9d8ed0713c6589e02958d79507cdd", 0x40, 0x6}, {&(0x7f0000000380)="aa0b8116f12281f91ebe59f7c7610ee470aad7f8d4cc5666221f0c7e5f5545d17014b7acf4235e47d48e45ebe7d90e823d4bc8e72eb3d9ecefffd82ea8702ccfa5bb0777b2ef5cca0950249f564264555eea2d0da54b488726a4267953a1cc3f7494929ed7fa7000d12cb3b014e3269c6378d0c76568a40003bea7d9caccc7f06b1140e42d7aec0814c992282e1165c8c968fc39e78b732c9e614ae795bd3985dbdcb80d5fec2ab5d76e538b975b3e2daf08af4c34fc66dd0c04819fb83d5827d0ea8e984c62f1e96a28", 0xca, 0x6}], 0x0, &(0x7f0000000500)='].\x00') mq_open(&(0x7f0000000100)='TIPC\x00', 0x40, 0x28, &(0x7f0000000140)={0x0, 0x6, 0x4, 0xfff, 0x200, 0x380, 0x100000000, 0x8}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3172.335511][T24955] input: syz1 as /devices/virtual/input/input276 03:46:55 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340df00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:55 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:55 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x41e, 0x5, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x40) ioctl$RTC_UIE_ON(r2, 0x7003) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:56 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3172.700937][T24955] input: syz1 as /devices/virtual/input/input277 03:46:56 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @loopback}, {0x6}, 0x60, {0x2, 0x4e22, @remote}, 'veth1\x00'}) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3172.904135][ C0] net_ratelimit: 16 callbacks suppressed [ 3172.904145][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3172.915759][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3172.921722][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3172.927546][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:46:56 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = gettid() ioprio_get$pid(0x1, r1) r2 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') fsetxattr$security_smack_transmute(r2, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) accept$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x15f) [ 3173.121645][T24993] validate_nla: 10 callbacks suppressed [ 3173.121657][T24993] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3173.156145][T24993] __nla_validate_parse: 10 callbacks suppressed [ 3173.156157][T24993] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:56 executing program 3: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000080)='\x00', 0xfffffffffffffff8) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x920, 0x0, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:46:56 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:56 executing program 5: r0 = socket(0x1f, 0x805, 0xfffffffffffffffc) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x0, 0x7fffffff, 0x1, [], &(0x7f0000000000)=0x1}) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:46:56 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340e000000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3173.223717][T24997] rds_sendmsg: 7 callbacks suppressed [ 3173.223769][T24997] atomic_op 00000000f7a0ea38 conn xmit_atomic 0000000016d46f7e [ 3173.370066][T25005] input: syz1 as /devices/virtual/input/input278 [ 3173.433291][T25012] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3173.462923][T25012] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:56 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3173.519800][T24993] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3173.555080][T24993] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3173.634709][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3173.641008][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3173.654929][T25021] atomic_op 000000008638b202 conn xmit_atomic 0000000016d46f7e 03:46:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:57 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x8000, 0x4, 0x1, 0x5, 0x10000, 0x7]}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3173.800806][T25012] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3173.832941][T25012] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3173.863360][T25025] atomic_op 000000001e05c299 conn xmit_atomic 0000000016d46f7e [ 3173.873875][T25027] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3173.891588][T25027] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 03:46:57 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340e100000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3174.024116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3174.024160][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3174.030015][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3174.041621][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3174.057984][T25005] input: syz1 as /devices/virtual/input/input279 03:46:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:57 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000080)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffe64}, 0x0) accept4(r1, 0x0, 0x0, 0x0) epoll_create1(0x80000) [ 3174.256023][T25041] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3174.311225][T25044] atomic_op 000000008727deb3 conn xmit_atomic 0000000016d46f7e [ 3174.328298][T25041] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:57 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3174.363959][T25027] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3174.382732][T25027] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3174.564937][T25055] atomic_op 000000004695becc conn xmit_atomic 0000000016d46f7e 03:46:58 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x88009, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1) 03:46:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:58 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xfed3) sync_file_range(r0, 0x0, 0x7, 0x3) fchown(r0, r1, r2) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) alarm(0xfffffffffffffff7) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3174.727967][T25041] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 3174.759667][T25060] atomic_op 00000000afeac867 conn xmit_atomic 0000000016d46f7e [ 3174.760265][T25041] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. 03:46:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)="ccea8feb1f8a8d2a9c3fc13c63d527ef5c3c6ae8724460b1445ed7760f76c32d570f2f37422426", 0x27, r0}, 0x68) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/196) getuid() dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:46:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3174.860649][T25069] input: syz1 as /devices/virtual/input/input280 [ 3174.909867][T25063] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 3174.938062][T25063] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3174.975904][T25074] atomic_op 00000000a5630c0e conn xmit_atomic 0000000016d46f7e 03:46:58 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340e200000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3175.129251][T25077] input: syz1 as /devices/virtual/input/input281 03:46:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3175.235459][T25084] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 03:46:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x80000) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:46:58 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001400)={0x53, 0xffffffffffffffff, 0xf8, 0x7, @buffer={0x0, 0x84, &(0x7f0000000180)=""/132}, &(0x7f0000000240)="1796afc9f97a826ab332b37718cafcf81a0b844edbe89faa14b231ce623610c0f943734ad7c0d37703931c2207305e47b2858ec86f156a8107eef8c7549dd7441b9d5a4176f9d6d4f861b4796eacd6e256c5466b34e846235243a9dffb80e3c0a90bbb61ec08c9f4ee27fff67ec031541225987b4701a34fff4d6223501860f6230feb176f2d0e0d547f806a9f2b4e792749a6ca16563883dc03bcd873dd46cedc85c51c2fd24f1884a3ed183dc6c0216a99f3604fdaa30f37f5c2fb2747e71ed3ba1765763ca7a8ccffe33db1cf658b440f0ac830478efb4f874ac6f9ca28efbbb9f2b3387beb3b7490a8bdbabfb52c04f30ecd2ecfc5fd", &(0x7f0000000400)=""/4096, 0x1, 0x4, 0x3, &(0x7f0000000340)}) [ 3175.279987][T25084] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3175.316784][T25090] atomic_op 000000007a7ac61e conn xmit_atomic 0000000016d46f7e 03:46:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) unshare(0x8000600) listen(r1, 0x80000000000000bd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}}], 0x4000000000000c7, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r2) 03:46:58 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3175.510223][T25096] input: syz1 as /devices/virtual/input/input282 [ 3175.590037][T25107] atomic_op 0000000000124a7c conn xmit_atomic 0000000016d46f7e 03:46:58 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x388ffd, 0x0) socket$inet(0x2, 0x5, 0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x1f) [ 3175.677853][T25102] input: syz1 as /devices/virtual/input/input283 03:46:59 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080), &(0x7f0000000180)=0x4) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000240)=@req={0xc5b, 0x0, 0x5, 0x7}, 0xffeb) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:46:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3175.893248][T25126] atomic_op 000000004e610c16 conn xmit_atomic 0000000016d46f7e 03:46:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x8, 0xfffffffffffffffb}) 03:46:59 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340e300000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:46:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:59 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x400) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/123, 0x7b}, {&(0x7f00000000c0)=""/244, 0xf4}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) [ 3176.197122][T25138] input: syz1 as /devices/virtual/input/input284 03:46:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:46:59 executing program 3: r0 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) unshare(0x400) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) fchown(r0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x800, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) request_key(&(0x7f0000000000)='blacklist\x00', 0x0, 0x0, 0xfffffffffffffff8) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r4, 0x0, 0x0, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x44) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280), 0x2) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 03:46:59 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0xfff, 0x1, 0x8000, 0x5, 0x7, 0x3f}, 0x10b01e63}, 0xa) close(0xffffffffffffffff) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) [ 3176.515346][T25138] input: syz1 as /devices/virtual/input/input285 03:46:59 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:47:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000000000000000086dd60d8652b00142f00fe8000000000000000000000000000aafe8000ff0000070000000000000000aa0000883e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="530006f7ffffffc68fffff879de3f52ab1339c75916ef29856e45e18fc8952d260b0d98eaf38f675"], 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x400) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r2, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) 03:47:00 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = gettid() fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={r4, r5, r6}, 0xc) 03:47:00 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3176.903517][T25176] input: syz1 as /devices/virtual/input/input286 03:47:00 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340e400000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:47:00 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000300)={@local, 0x39, r2}) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x2, {0x7, 0x1e, 0x5, 0x2, 0x8001, 0x0, 0x80, 0x8}}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r5, 0x3c, 0x0, @ib={0x1b, 0x5, 0x6, {"2df3951f964c94c058e6e143e14cee63"}, 0x10000, 0x80000001, 0x8001}}}, 0x90) ioctl$SIOCRSACCEPT(r3, 0x89e3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 03:47:00 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x0) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000080)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) 03:47:00 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3177.481685][T25179] input: syz1 as /devices/virtual/input/input287 03:47:00 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) 03:47:00 executing program 5: r0 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0x10, 0x0}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) listen(r1, 0x8) r2 = socket$inet6(0xa, 0x80006, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4(r1, 0x0, 0x0, 0x0) [ 3177.685134][ T3006] ================================================================== [ 3177.693779][ T3006] BUG: KASAN: use-after-free in blk_mq_free_rqs+0x49f/0x4b0 [ 3177.701080][ T3006] Read of size 8 at addr ffff888033ec6fd0 by task kworker/0:2/3006 [ 3177.709069][ T3006] [ 3177.711420][ T3006] CPU: 0 PID: 3006 Comm: kworker/0:2 Not tainted 5.2.0-rc3-next-20190607 #11 [ 3177.720198][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3177.730289][ T3006] Workqueue: events __blk_release_queue [ 3177.735849][ T3006] Call Trace: [ 3177.739156][ T3006] dump_stack+0x172/0x1f0 [ 3177.743509][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3177.748481][ T3006] print_address_description.cold+0xd4/0x306 [ 3177.754468][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3177.759420][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3177.764365][ T3006] __kasan_report.cold+0x1b/0x36 [ 3177.764407][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3177.764423][ T3006] kasan_report+0x12/0x20 [ 3177.764438][ T3006] __asan_report_load8_noabort+0x14/0x20 [ 3177.764451][ T3006] blk_mq_free_rqs+0x49f/0x4b0 [ 3177.764465][ T3006] ? dd_exit_queue+0x92/0xd0 [ 3177.764482][ T3006] ? kfree+0x1ec/0x2a0 [ 3177.784328][ T3006] blk_mq_sched_tags_teardown+0x126/0x210 [ 3177.784349][ T3006] ? dd_request_merge+0x230/0x230 [ 3177.784363][ T3006] blk_mq_exit_sched+0x1fa/0x2d0 [ 3177.784383][ T3006] elevator_exit+0x70/0xa0 [ 3177.784401][ T3006] __blk_release_queue+0x127/0x330 [ 3177.784420][ T3006] process_one_work+0x989/0x1790 [ 3177.784443][ T3006] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3177.784455][ T3006] ? lock_acquire+0x16f/0x3f0 [ 3177.784487][ T3006] worker_thread+0x98/0xe40 [ 3177.823215][ T3006] kthread+0x354/0x420 [ 3177.823232][ T3006] ? process_one_work+0x1790/0x1790 [ 3177.823246][ T3006] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3177.823270][ T3006] ret_from_fork+0x24/0x30 [ 3177.851979][ T3006] [ 3177.851989][ T3006] Allocated by task 21022: [ 3177.852008][ T3006] save_stack+0x23/0x90 [ 3177.852021][ T3006] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 3177.852039][ T3006] kasan_kmalloc+0x9/0x10 [ 3177.883738][ T3006] kmem_cache_alloc_trace+0x151/0x750 [ 3177.889151][ T3006] loop_add+0x51/0x8d0 [ 3177.893253][ T3006] loop_control_ioctl+0x165/0x360 [ 3177.898300][ T3006] do_vfs_ioctl+0xdb6/0x13e0 [ 3177.902904][ T3006] ksys_ioctl+0xab/0xd0 [ 3177.907118][ T3006] __x64_sys_ioctl+0x73/0xb0 [ 3177.911725][ T3006] do_syscall_64+0xfd/0x680 [ 3177.916242][ T3006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3177.922152][ T3006] [ 3177.924512][ T3006] Freed by task 25163: [ 3177.928590][ T3006] save_stack+0x23/0x90 [ 3177.932932][ T3006] __kasan_slab_free+0x102/0x150 [ 3177.937977][ T3006] kasan_slab_free+0xe/0x10 [ 3177.942803][ T3006] kfree+0x106/0x2a0 [ 3177.946718][ T3006] loop_remove+0xa1/0xd0 [ 3177.950974][ T3006] loop_control_ioctl+0x320/0x360 [ 3177.956020][ T3006] do_vfs_ioctl+0xdb6/0x13e0 [ 3177.960630][ T3006] ksys_ioctl+0xab/0xd0 [ 3177.964803][ T3006] __x64_sys_ioctl+0x73/0xb0 [ 3177.969403][ T3006] do_syscall_64+0xfd/0x680 [ 3177.973917][ T3006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3177.979908][ T3006] [ 3177.982248][ T3006] The buggy address belongs to the object at ffff888033ec6dc0 [ 3177.982248][ T3006] which belongs to the cache kmalloc-1k of size 1024 [ 3177.996336][ T3006] The buggy address is located 528 bytes inside of [ 3177.996336][ T3006] 1024-byte region [ffff888033ec6dc0, ffff888033ec71c0) [ 3178.009706][ T3006] The buggy address belongs to the page: [ 3178.015444][ T3006] page:ffffea0000cfb180 refcount:1 mapcount:0 mapping:ffff8880aa400ac0 index:0x0 compound_mapcount: 0 [ 3178.026395][ T3006] flags: 0x1fffc0000010200(slab|head) [ 3178.031796][ T3006] raw: 01fffc0000010200 ffffea000154e388 ffffea0000616c08 ffff8880aa400ac0 [ 3178.040401][ T3006] raw: 0000000000000000 ffff888033ec6040 0000000100000007 0000000000000000 [ 3178.048995][ T3006] page dumped because: kasan: bad access detected [ 3178.049001][ T3006] [ 3178.049006][ T3006] Memory state around the buggy address: [ 3178.049018][ T3006] ffff888033ec6e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3178.049027][ T3006] ffff888033ec6f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 03:47:01 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x400000002c5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="a5d1827c999fefb337eeb05e6753ee851132de0485085e374c0f77c6140c3dfd1f11ffdf31d9e89aee7460003b7fde392ce40205026d759eade0a7784f4bdb6f835819f28e78334a7f107e8b3741de7718c52f269ba196451a2be668a0c320cd1f812a414a89ac6d"]) write$FUSE_LK(r0, &(0x7f0000001b80)={0x28, 0x0, 0x2, {{0x7, 0x0, 0x1}}}, 0x28) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) set_mempolicy(0x8003, &(0x7f0000000080)=0x5, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) msgget(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x20000, 0x200000) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x27c) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x1) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000540)=""/229) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) 03:47:01 executing program 0: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c2d94f21131d20010000340e500000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:47:01 executing program 1: r0 = socket$kcm(0x10, 0x10080000000003, 0x10) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e0000001e000507ed0080648c6394f21131d200100003402c00000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') futex(&(0x7f0000000000)=0x1, 0x80, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)=0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) 03:47:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x7fe, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 03:47:01 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0}}], 0x58, 0x0}, 0x0) [ 3178.049037][ T3006] >ffff888033ec6f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3178.049043][ T3006] ^ [ 3178.049052][ T3006] ffff888033ec7000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3178.049062][ T3006] ffff888033ec7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3178.049066][ T3006] ================================================================== [ 3178.049071][ T3006] Disabling lock debugging due to kernel taint [ 3178.049233][ C0] net_ratelimit: 17 callbacks suppressed [ 3178.049241][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 3178.094683][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 3178.151277][ T3006] Kernel panic - not syncing: panic_on_warn set ... [ 3178.157917][ T3006] CPU: 0 PID: 3006 Comm: kworker/0:2 Tainted: G B 5.2.0-rc3-next-20190607 #11 [ 3178.168071][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3178.181810][ T3006] Workqueue: events __blk_release_queue [ 3178.184104][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3178.187374][ T3006] Call Trace: [ 3178.187395][ T3006] dump_stack+0x172/0x1f0 [ 3178.187414][ T3006] panic+0x2cb/0x744 [ 3178.187429][ T3006] ? __warn_printk+0xf3/0xf3 [ 3178.187450][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3178.193250][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3178.196578][ T3006] ? preempt_schedule+0x4b/0x60 [ 3178.196593][ T3006] ? ___preempt_schedule+0x16/0x18 [ 3178.196606][ T3006] ? trace_hardirqs_on+0x5e/0x220 [ 3178.196621][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3178.196642][ T3006] end_report+0x47/0x4f [ 3178.201298][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 3178.205059][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3178.205073][ T3006] __kasan_report.cold+0xe/0x36 [ 3178.205087][ T3006] ? blk_mq_free_rqs+0x49f/0x4b0 [ 3178.205104][ T3006] kasan_report+0x12/0x20 [ 3178.209834][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 3178.214717][ T3006] __asan_report_load8_noabort+0x14/0x20 [ 3178.214730][ T3006] blk_mq_free_rqs+0x49f/0x4b0 [ 3178.214743][ T3006] ? dd_exit_queue+0x92/0xd0 [ 3178.214759][ T3006] ? kfree+0x1ec/0x2a0 [ 3178.252161][T25229] rds_sendmsg: 6 callbacks suppressed [ 3178.252189][T25229] atomic_op 0000000055294a0a conn xmit_atomic 0000000016d46f7e [ 3178.255299][ T3006] blk_mq_sched_tags_teardown+0x126/0x210 [ 3178.255316][ T3006] ? dd_request_merge+0x230/0x230 [ 3178.255328][ T3006] blk_mq_exit_sched+0x1fa/0x2d0 [ 3178.255345][ T3006] elevator_exit+0x70/0xa0 [ 3178.255360][ T3006] __blk_release_queue+0x127/0x330 [ 3178.255377][ T3006] process_one_work+0x989/0x1790 [ 3178.255398][ T3006] ? pwq_dec_nr_in_flight+0x320/0x320 [ 3178.255410][ T3006] ? lock_acquire+0x16f/0x3f0 [ 3178.255431][ T3006] worker_thread+0x98/0xe40 [ 3178.255452][ T3006] kthread+0x354/0x420 [ 3178.255466][ T3006] ? process_one_work+0x1790/0x1790 [ 3178.255479][ T3006] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 3178.255498][ T3006] ret_from_fork+0x24/0x30 [ 3178.256980][ T3006] Kernel Offset: disabled [ 3178.381339][ T3006] Rebooting in 86400 seconds..