[ 241.039301] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 241.046750] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)=ANY=[@ANYBLOB='g\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = timerfd_create(0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000200)={0x0, 0x3, 0x6}) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:24 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0xffffffffffffffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:24 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 241.220681] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 241.228153] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x420000, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r0 = timerfd_create(0x6, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) geteuid() 00:42:24 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000000) r0 = timerfd_create(0x2, 0x80001) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x404000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x3d5a, 0x2]) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x100, 0x40) 00:42:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:25 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x101000) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x3f, 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:25 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x2, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 242.126418] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 242.133949] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:25 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0xa]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:25 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4004240b, &(0x7f0000000040)={0x5, 0x70, 0x8, 0x4, 0x100000001, 0x6, 0x0, 0x1, 0x1000, 0xc, 0x5, 0x5, 0x293a, 0x3, 0x1, 0x7be1, 0x2, 0x79e, 0x20, 0x101, 0x6, 0x5, 0x3, 0x6, 0x1, 0x7, 0x4, 0x5, 0xf90, 0x9, 0x3, 0x0, 0x5, 0xfffffffffffffff9, 0x7, 0x800, 0x0, 0x6, 0x0, 0x8000, 0x4, @perf_config_ext={0x683}, 0x21404, 0x930, 0xff, 0x4, 0x6, 0x5d, 0x8000}) write$evdev(r1, &(0x7f0000000240)=[{{}, 0x64e2, 0xff, 0x101}, {{0x0, 0x2710}, 0x4, 0x2, 0x7}], 0xffffffffffffff52) timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000200)={{0x4000000000000000}, {0x77359400}}, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000004c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r2}}, 0x18) [ 242.316979] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 242.324395] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:25 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8000, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000680)=0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x70, 0x1, 0x3, 0x8, 0x9, 0x0, 0x5, 0x2, 0x4, 0xe4, 0x7fff, 0x1bf1270d, 0x2fdb40000000000, 0xfffffffffffffffe, 0x79, 0x6, 0x7fffffff, 0x3, 0x5, 0x114, 0x1, 0x5, 0x6, 0x0, 0x6ea23799, 0x1, 0x9, 0x4, 0x401, 0x5, 0x7fff, 0x57d5, 0x2, 0xcb, 0x200, 0x3f, 0x83e, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000580)}, 0x1000, 0x4, 0x2, 0x7, 0x60, 0x57}, r2, 0x9, r0, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0}) io_getevents(r1, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000180)={r3}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup(r0) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000500)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f00000005c0)={0x6, 0x7, 0xabc, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}, 'ifb0\x00'}) io_submit(r1, 0x1, &(0x7f0000002cc0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}]) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timerfd_settime(r4, 0x1, &(0x7f0000000480)={{}, {r5, r6+10000000}}, &(0x7f00000004c0)) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000540)={0xffffffffffffff73}, 0x4) r7 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000100)={0x2000000000000043, &(0x7f0000000040)}) r8 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={"d2029999cf8500000000008808935b10", 0x1}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r9 = timerfd_create(0x0, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f00000003c0)={r11, 0x3}, &(0x7f0000000400)=0x8) timerfd_settime(r9, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 6: read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x7, 0x70, 0x7, 0x80000000, 0x1, 0x6, 0x0, 0x80000001, 0x0, 0x2, 0x2, 0x7, 0x6, 0x101, 0x7, 0x0, 0x944, 0x286, 0x8, 0x0, 0x0, 0x9, 0xfffffffffffffbff, 0x1, 0x10001, 0x42e, 0x8000, 0x1, 0x3ff, 0x100, 0xf29, 0x10001, 0xfffffffffffffffd, 0x16336b0b, 0x8, 0x3, 0x3dc28216, 0x2, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x10000, 0x800, 0x8, 0x7, 0x9, 0x0, 0x40}, 0xffffffffffffff9c, 0x10, 0xffffffffffffff9c, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000400)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, &(0x7f0000000200)=0xc) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000003c0)={0x8, 0x7, 0x100000000}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r3, 0x7fff}, &(0x7f0000000380)=0x8) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000600)=0x80000001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000580)={0x6, 0x1, {0x3, 0x2, 0x400, 0x3, 0x20}}) 00:42:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x541b, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:26 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 243.209900] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 243.217302] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:26 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0xa00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = socket(0x0, 0x4, 0xdf) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x80) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@rand_addr, @broadcast=0xffffffff, r2}, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 243.369127] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 243.376525] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x5450, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:27 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 244.250150] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 244.257543] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:27 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x2000000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x22000, 0x0) unshare(0x40600) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 244.404720] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 244.412150] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:27 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2040, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000004) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x97ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r1, r2+30000000}}, &(0x7f00000000c0)) timerfd_settime(r0, 0x1, &(0x7f0000000240)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 245.273699] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 245.281099] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:28 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x2000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:28 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000480)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='rdma.current\x00', 0x0, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000280), &(0x7f00000002c0)) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x80000000}}, 0x100, 0x4, 0x0, "01b2c068fdb2ed5314ef4d890e73226497b20ff7c310d0025a9be76ea23f5972c2e3381b936b0f4e3f47964541f8311dc04f9178384f5d7887147ea78f8194731fd03d241b95c469e3772cb2e2057460"}, 0xd8) r3 = getpid() perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r3, 0x0, r1, 0x0) unshare(0x800) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, &(0x7f0000000240)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x801) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000400)={{0x6, 0x1d2}, 0x0, 0x5, 0x7, {0x0, 0x68b7}, 0x8000, 0x4}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) 00:42:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5332, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 245.427696] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 245.435096] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:28 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x8000000) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x50000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x3, 0x7, 0x81, 0x9, 0x1e7a6da380000000, 0x6, 0x7, 0x65a6d5a5, 0x80000000, 0x80000000, 0x896e, 0x40}) 00:42:28 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) write$evdev(r2, &(0x7f0000000200)=[{{0x0, 0x7530}, 0x9, 0x8, 0x81}, {{0x0, 0x2710}, 0x7fff, 0xa7, 0x40}], 0x20) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 00:42:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 246.284160] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 246.291574] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:29 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xe0ffffffffffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:29 executing program 5: unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8000000000000007, 0x101, 0x20}, 0x153) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000000)="e3", &(0x7f0000000080)=""/81}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 246.441779] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 246.449199] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 246.488927] IPVS: ftp: loaded support on port[0] = 21 [ 246.553845] IPVS: ftp: loaded support on port[0] = 21 00:42:29 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:29 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) syslog(0x3, &(0x7f0000000580)=""/4096, 0x1000) 00:42:29 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0a45320, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x6) sendmsg$nl_crypto(r0, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0x5, &(0x7f0000000080)={&(0x7f0000000340)=@del={0x100, 0x11, 0x800, 0x70bd2c, 0x25dfdbff, {{'ctr(serpent)\x00'}, [], [], 0x2000, 0x400}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x100000001}, {0x8, 0x1, 0x1}]}, 0xfffffe19}, 0x1, 0x0, 0x0, 0x4000841}, 0x10) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:29 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x1, 0xffff, 0xa42db00000000000, 0x8]}) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7c, 0x6987a10e, 0x6, 0x80, 0x0, 0x100000000, 0x80480, 0x5, 0x101, 0x5, 0x2, 0x1, 0x3ff, 0x4, 0xfaa, 0xfffffffffffffffa, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x31, 0x2ef6, 0x2000007fff, 0x81, 0x4, 0x4, 0x4, 0x9a81, 0x8, 0xb3, 0x100000000, 0x1, 0x401, 0x8, 0x562, 0x8, 0x0, 0x10000, 0x5, @perf_config_ext={0x9, 0x9}, 0x20020, 0x2, 0xb8ca, 0x6, 0xa60, 0xfffffffffffffff9, 0x8001}, r1, 0x1, 0xffffffffffffff9c, 0x2) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:29 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 247.324908] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 247.332368] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:30 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xffffffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000200)={0x1ae014b9, 0x2, 'client1\x00', 0xffffffff80000000, "dac22322bbf2d15e", "8db32f0545963df8a3fb79de616bd1b370b291dc025f460f2ba39a0675ef2f86", 0xff, 0x4b}) r1 = socket(0x10, 0x807, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000040)=0x401, 0x4) r2 = timerfd_create(0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) timerfd_settime(r2, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:30 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 247.480079] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 247.487510] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:30 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:30 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x77359400}}) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x8200) getsockopt$inet_dccp_int(r1, 0x21, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180), &(0x7f0000000240)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x5460, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) sysinfo(&(0x7f00000002c0)=""/4096) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000028c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000002900)={@mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @mcast1={0xff, 0x1, [], 0x1}, 0x6, 0x1, 0x2, 0x500, 0x4, 0x4000000, r2}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x5, &(0x7f0000000200)=[{}, {}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}]}) 00:42:30 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x16, 0x40801) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00', 0xa00}) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) 00:42:30 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 248.382426] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 248.389841] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:31 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x8000000000000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x7c, "8411e4e4f2e8bbf9f2b84f9788e570e6ca6ae7052a1992ad02f8171bb5e37d4a90d0d2eff10d83323755cfb5b6f2c7a9124a7119b5f3477d3a79b2327af460a148bbffd2eed4f986281ae60b0d37beadcce2314b92eca02c6f8fedc806156027a04f71f671b64d78f457fca40741c2d27ac3d2712ca3db7ae5f7a155"}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e21, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x7}}}, 0x84) [ 248.537874] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 248.545325] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:31 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:32 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x20, 0x1}, 'port1\x00', 0x1, 0x400, 0x7, 0x8, 0x18e6d0e6, 0x1ff, 0x7, 0x0, 0x4, 0x400}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = gettid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) kcmp(r2, r3, 0x0, r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) syncfs(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:32 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:32 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x4, 0x30b7bb2f6bf6a18a) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000280)={0x1, r0, 0x1}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x10000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000080)=0x2) unshare(0x40600) mbind(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x0, &(0x7f0000000040)=0x200, 0x4, 0x1) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) clock_getres(0x5, &(0x7f00000000c0)) 00:42:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc058534b, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x964, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x400000000040600) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x20000400800) r1 = timerfd_create(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000280)) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:32 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 249.431741] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 249.439146] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:32 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x801) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0xef13, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:42:32 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xf000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 249.585213] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 249.592669] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:32 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffd) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 5: sysfs$2(0x2, 0x8, &(0x7f0000000200)=""/104) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) r2 = gettid() clock_getres(0x4, &(0x7f0000000280)) sched_setscheduler(r2, 0x6, &(0x7f00000000c0)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) 00:42:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc04c5349, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) fcntl$setlease(r0, 0x400, 0x0) 00:42:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:33 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10800, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x80) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x4, {{0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, [], 0x1d}, 0x1}}}, 0x84) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r1 = timerfd_create(0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x80000000, &(0x7f00000000c0)=0x4) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x4, 0x5, 0x3, 0xff, 0x8, 0x0, 0xffffffffffff8001, 0x53b5, 0x100000000, 0x101, 0x3, 0x1}) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000200)={0x0, 0x20007ff, 0x8, &(0x7f0000000240)=0xc289}) [ 250.460628] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 250.468044] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:33 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x2000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) tgkill(r2, r3, 0x3d) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r1, 0x9, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000240)={r4, r5+30000000}) unshare(0x40600) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x40100, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000001480)={'nat\x00'}, &(0x7f0000001500)=0x50) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x8}, &(0x7f0000000400)=0x8) setsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000480)="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", 0x1000) r8 = timerfd_create(0x0, 0x0) timerfd_settime(r8, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) r9 = fcntl$getown(r0, 0x9) ptrace$pokeuser(0x6, r9, 0x1ff, 0x1ff) 00:42:33 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 250.630690] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 250.638107] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0bc5351, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:34 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x101}) 00:42:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 251.517826] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 251.525254] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:34 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x100) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x5, 0x0, 0x2, {r2, r3+30000000}, 0x8, 0xceaf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:34 executing program 5: 00:42:34 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:34 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:34 executing program 5: 00:42:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:34 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 251.673452] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 251.680901] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:34 executing program 5: 00:42:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40605346, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:35 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:35 executing program 5: 00:42:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 252.557630] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 252.565066] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:35 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000380)={0xfffffffffffffffa, 0x2, {0x0, 0x3, 0x0, 0x0, 0x388bce27}}) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r1 = getpgrp(0x0) ptrace$setregset(0x4205, r1, 0x201, &(0x7f0000000000)={&(0x7f00000000c0)="935f9d14d11e537a84309113bc78e5ad4a2144baf238668752b374af0113f6346b830fa3dc6818e1a8539f5af8eb1ee86fd9ed52c58ce1c47f47368043f3abcb7715b8feeb2fa479cc012d9f9a4881b2e9155f070a4a92ec9a9425f46dd1dfa64307a1418c392c6cd37690d65c3fe65e1d1ff77af5d716768526247c94d1bb0e0a5af5bac70acc37464c8c394486725d19d27ea6ec07f3cca8c9e61131074de4874e3e50f9b5dd0cd41a743522f8a0ec26bee0a093021c3935e7d8208f5044b452ed415432aac6345d606a2db5349dc678850172b52f58441221af67ae3fc63ded0fc05f999887187bb5311193b9a65ee8328316", 0xf4}) 00:42:35 executing program 5: 00:42:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:35 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xfdffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:35 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:35 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:35 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="295ee1311f16f477671070") r1 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a1, &(0x7f00000001c0)={'bridge0\x00', 0xffffffffffffffff}) 00:42:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 252.711575] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 252.719055] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 252.789962] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.797301] bridge0: port 1(bridge_slave_0) entered disabled state 00:42:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x80045300, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:36 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 253.095653] device bridge_slave_1 left promiscuous mode [ 253.102189] bridge0: port 2(bridge_slave_1) entered disabled state 00:42:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 253.167514] device bridge_slave_0 left promiscuous mode [ 253.173766] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.602525] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 253.609974] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 253.757885] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 253.765305] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0xb339cd66c91ca116, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101440, 0x0) setsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000580)="42eede4d771229f0c011c6bfe37c14348d96cf53d517fc842969054d6956ff609daaa261bfb860f899b4277259f72e4bbac063651ef273a54dc85ce5ba713d061976294728195dd911ae9c20a13cf55e70d866513fa043dc621b54150b0f6d30f04a112339e362dfaa856260ef8c143ca8363af5ff6726c042bca7568dfaedcd15a5a665287e520fd13f58b85b8e576473277b71cd6896754d8c5f93edc1ab98262e", 0xa2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x4, @time={0x0, 0x1c9c380}, 0x9, {0x400, 0x1}, 0x4, 0x3, 0x5}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000040)) 00:42:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:36 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="295ee1311f16f477671070") r1 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a1, &(0x7f00000001c0)={'bridge0\x00', 0xffffffffffffffff}) 00:42:36 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:36 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="295ee1311f16f477671070") r1 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a1, &(0x7f00000001c0)={'bridge0\x00', 0xffffffffffffffff}) 00:42:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:36 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x4020940d, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="295ee1311f16f477671070") r1 = socket(0x2, 0x3, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a1, &(0x7f00000001c0)={'bridge0\x00', 0xffffffffffffffff}) 00:42:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:36 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 254.664217] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 254.671607] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 254.817687] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 254.825088] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:38 executing program 6: r0 = epoll_create1(0x80000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x1) add_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="1082199733be090000000000000052e013643ed8df18c507e8adf86bb19fc60300bc9d997cd7feb937ede5ae1028243622fe14c419ac1ab2b7cb782fd0c32c45fbd39c14694525549239447ff2f7405282574a86ddbf7a302642eb09a895d3bb0e5b5af65b7f4a7aded36d0e556bd0949b79349659c13317144d01ae0b262a8753df18bd516a0e79ddf7", 0x8a, 0xffffffffffffffff) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)) fcntl$setflags(r1, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x1, 0x4) 00:42:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:38 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) rmdir(&(0x7f00000005c0)='./file0\x00') 00:42:38 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:38 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x408c5333, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:38 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:38 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 00:42:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:38 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 255.285545] binder: 16821:16822 ERROR: BC_REGISTER_LOOPER called without request [ 255.293509] binder: 16822 RLIMIT_NICE not set [ 255.306449] binder: 16822 RLIMIT_NICE not set [ 255.320811] binder: release 16821:16822 transaction 10 in, still active [ 255.327828] binder: send failed reply for transaction 10 to 16821:16822 [ 255.360814] binder_alloc: binder_alloc_mmap_handler: 16821 20001000-20004000 already mapped failed -16 [ 255.392555] binder: BINDER_SET_CONTEXT_MGR already set [ 255.403344] binder: 16821:16822 ioctl 40046207 0 returned -16 [ 255.409430] binder_alloc: 16821: binder_alloc_buf, no vma [ 255.415093] binder: 16821:16827 transaction failed 29189/-3, size 24-0 line 2967 [ 255.429702] binder: 16821:16822 ERROR: BC_REGISTER_LOOPER called without request [ 255.437445] binder: 16822 RLIMIT_NICE not set [ 255.559896] binder: undelivered TRANSACTION_ERROR: 29189 [ 255.565711] binder: undelivered TRANSACTION_COMPLETE [ 255.570907] binder: undelivered TRANSACTION_ERROR: 29189 [ 255.936337] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 255.943757] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 256.089712] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 256.097134] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:39 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x5421, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:39 executing program 5: 00:42:39 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:39 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x11000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:39 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4000, 0x100) openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x3d8cb47d95373def, @tick, 0x0, {}, 0x100000000, 0xfffffffffffffffd}) fcntl$setlease(r0, 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x0, 0x0, 0x1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:39 executing program 5: 00:42:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:39 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:39 executing program 5: 00:42:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:39 executing program 5: 00:42:39 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 5: [ 257.041203] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 257.048673] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:40 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:40 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xffffffffffffffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 257.196506] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 257.203887] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:40 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @tick, 0x0, {0x0, 0x1}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:40 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x402c5828, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 5: 00:42:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) 00:42:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1004000000016) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:42:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:40 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 258.046971] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 258.054424] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:41 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:41 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xf]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 258.200721] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 258.208152] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:41 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x12107d) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x4}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000000)="676121e1281bb5d9f07f9edfb39414633f14be0b6beb2bde214e881e5b92764425e2f9276b818531c4", 0x29}, {&(0x7f0000000040)="e1d0", 0x2}], 0x3, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x124, 0x8000}, 0x4010) 00:42:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40049409, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:41 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x40) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40047705, &(0x7f00000000c0)={0x371, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x1, &(0x7f0000000480)=[r3]) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x800, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xffffffffffffffff}, 0x1c) fremovexattr(r2, &(0x7f0000000240)=@known='security.evm\x00') setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x69c, 0xffffffff, 0x0, 0x270, 0x494, 0xffffffff, 0xffffffff, 0x5d0, 0x5d0, 0x5d0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x24c, 0x270, 0x0, {}, [@common=@inet=@hashlimit3={0x158, 'hashlimit\x00', 0x3, {'dummy0\x00', {0x1000, 0x54a, 0x40, 0x6, 0x7, 0x10001, 0x0, 0xffffffffffffff7f, 0x58, 0x18}, 0x8}}, @common=@srh={0x2c, 'srh\x00', 0x0, {0x1d, 0x0, 0x7ff, 0x8000, 0x0, 0x200, 0x80}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0xd}, @remote={0xfe, 0x80, [], 0xbb}, [0xffffffff, 0xffffffff, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xffffff00], 'veth1_to_team\x00', 'veth0_to_team\x00', {0xff}, {}, 0x7f, 0x7f, 0x2, 0x10}, 0x0, 0x200, 0x224, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x7, 0x8, 0x2, 0x7c7, 0x4, 0x7, [@dev={0xfe, 0x80, [], 0x12}, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @empty, @mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [], 0xb}, @dev={0xfe, 0x80, [], 0x8}, @dev={0xfe, 0x80, [], 0x18}, @dev={0xfe, 0x80}, @ipv4={[], [0xff, 0xff]}, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [], 0x1}], 0xb}}]}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00'}}, {{@ipv6={@loopback={0x0, 0x1}, @loopback={0x0, 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 'dummy0\x00', 'gre0\x00', {0xff}, {}, 0x37, 0x8, 0x7, 0x2}, 0x0, 0xf8, 0x13c, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d3, 0x1000, 0x7, 0x1}}]}, @common=@inet=@TEE={0x44, 'TEE\x00', 0x1, {@ipv6=@local={0xfe, 0x80, [], 0xaa}, 'veth1\x00', 0x7}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x6f8) 00:42:41 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={{&(0x7f0000015000/0x3000)=nil, 0x3000}}) close(0xffffffffffffffff) 00:42:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 259.053419] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 259.060865] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:42 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xfffffffe]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:42 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:42 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 259.208745] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 259.216190] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc020660b, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xffeb]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:42 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 259.534168] FAULT_FLAG_ALLOW_RETRY missing 30 [ 259.538928] CPU: 1 PID: 17030 Comm: syz-executor5 Not tainted 4.18.0-rc2+ #24 [ 259.546213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.555566] Call Trace: [ 259.558158] dump_stack+0x1c9/0x2b4 [ 259.561782] ? dump_stack_print_info.cold.2+0x52/0x52 [ 259.566966] ? kasan_check_write+0x14/0x20 [ 259.571198] ? do_raw_spin_lock+0xc1/0x200 [ 259.575443] handle_userfault.cold.32+0x47/0x62 [ 259.580119] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 259.584704] ? trace_hardirqs_on+0x10/0x10 [ 259.588936] ? graph_lock+0x170/0x170 [ 259.592738] ? resched_curr+0x10f/0x190 [ 259.596726] ? print_usage_bug+0xc0/0xc0 [ 259.600788] ? print_usage_bug+0xc0/0xc0 [ 259.604850] ? rb_erase+0x3550/0x3550 [ 259.608658] ? userfaultfd_ctx_put+0x810/0x810 [ 259.613253] ? graph_lock+0xc1/0x170 [ 259.617061] ? find_held_lock+0x36/0x1c0 [ 259.621140] ? __lock_acquire+0x7fc/0x5020 [ 259.625379] ? graph_lock+0x170/0x170 [ 259.629183] ? find_held_lock+0x36/0x1c0 [ 259.633248] ? lock_downgrade+0x8f0/0x8f0 [ 259.637420] ? kasan_check_read+0x11/0x20 [ 259.641567] ? do_raw_spin_unlock+0xa7/0x2f0 [ 259.645973] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 259.650558] ? kasan_check_write+0x14/0x20 [ 259.654795] ? do_raw_spin_lock+0xc1/0x200 [ 259.659050] __handle_mm_fault+0x3a0a/0x4460 [ 259.663555] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 259.668392] ? graph_lock+0x170/0x170 [ 259.672221] ? lock_downgrade+0x8f0/0x8f0 [ 259.676366] ? kasan_check_read+0x11/0x20 [ 259.680503] ? rcu_is_watching+0x8c/0x150 [ 259.684652] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 259.689050] ? handle_mm_fault+0x8c4/0xc80 [ 259.693274] handle_mm_fault+0x53e/0xc80 [ 259.697330] ? __handle_mm_fault+0x4460/0x4460 [ 259.701909] ? find_vma+0x34/0x190 [ 259.705443] __do_page_fault+0x620/0xe50 [ 259.709493] ? mm_fault_error+0x380/0x380 [ 259.713652] ? graph_lock+0x170/0x170 [ 259.717456] do_page_fault+0xf6/0x8c0 [ 259.721255] ? vmalloc_sync_all+0x30/0x30 [ 259.725398] ? find_held_lock+0x36/0x1c0 [ 259.729478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.734343] page_fault+0x1e/0x30 [ 259.737784] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 259.743383] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 259.762700] RSP: 0018:ffff8801c569fc10 EFLAGS: 00010203 [ 259.768078] RAX: 0000000000000004 RBX: 000000000000000c RCX: 0000000000000001 [ 259.775372] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff8801c569fc88 [ 259.782631] RBP: ffff8801c569fc48 R08: ffffed0038ad3f93 R09: ffffed0038ad3f91 [ 259.789897] R10: ffffed0038ad3f92 R11: 0000000000000003 R12: 000000002001300c [ 259.797163] R13: 0000000020013000 R14: ffff8801c569fc88 R15: 00007ffffffff000 [ 259.804462] ? _copy_from_user+0x10d/0x150 [ 259.808692] do_compat_sigaltstack+0xc5/0x610 [ 259.813176] ? fget_raw+0x20/0x20 [ 259.816634] ? do_sigaltstack+0x690/0x690 [ 259.820789] ? __ia32_compat_sys_futex+0x3e6/0x5f0 [ 259.825703] ? exit_to_usermode_loop+0x8c/0x370 [ 259.830375] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.835900] ? exit_to_usermode_loop+0x1f4/0x370 [ 259.840657] ? syscall_slow_exit_work+0x500/0x500 [ 259.845502] __ia32_compat_sys_sigaltstack+0x52/0x80 [ 259.850607] do_fast_syscall_32+0x34d/0xfb2 [ 259.854925] ? do_int80_syscall_32+0x890/0x890 [ 259.859942] ? _raw_spin_unlock_irq+0x27/0x70 [ 259.864422] ? finish_task_switch+0x1d3/0x890 [ 259.868906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.874428] ? syscall_return_slowpath+0x31d/0x5e0 [ 259.879358] ? sysret32_from_system_call+0x5/0x46 [ 259.884200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.889039] entry_SYSENTER_compat+0x70/0x7f [ 259.893444] RIP: 0023:0xf7fb5cb9 [ 259.896792] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 259.915994] RSP: 002b:00000000f5fb10ac EFLAGS: 00000282 ORIG_RAX: 00000000000000ba [ 259.923709] RAX: ffffffffffffffda RBX: 0000000020013000 RCX: 0000000020000040 00:42:42 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x880, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x2cd0, 0x8}, 'port0\x00', 0x20, 0x80000, 0x8, 0x100, 0x3, 0x64, 0x80000000, 0x0, 0x3, 0x83}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x1000000000, 0x800, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 259.930987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.938254] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 259.945604] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 259.952880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:42:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa}}}, 0x108) 00:42:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:43 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 260.084657] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 260.092073] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:43 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:43 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xa]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:43 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:43 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f00000e1000)='./file0\x00', 0x0) r1 = open(&(0x7f0000851000)='./file0\x00', 0x40000, 0x0) symlinkat(&(0x7f0000001040)='./file0\x00', r1, &(0x7f0000001080)='./file0\x00') r2 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00004a9000)=""/4096, 0x1000) getdents(r2, &(0x7f0000000040)=""/4096, 0x1000) [ 260.248830] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 260.256215] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x7000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:44 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000580)=""/140, 0x8c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x32c0, 0x80800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x80000000004) write(r2, &(0x7f0000000000)="290000001400090000000000000060eb0100100006a40e07464600007f25ffffff0140002a00f3ff09", 0x29) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x40000, 0x0) 00:42:44 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="42544715d28c", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x28, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) 00:42:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) 00:42:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 261.150416] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 261.157816] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 261.207942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 261.238749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:42:44 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x2000000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:44 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x408c5333, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x40000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 261.338719] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 261.346126] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:45 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:45 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5332, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 262.221139] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 262.228546] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:45 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xf00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:45 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:45 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 262.381232] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 262.388674] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x7}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:45 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:46 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8000, 0x4000) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:46 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5332, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 263.294556] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 263.301969] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:46 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:46 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:46 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 263.448691] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 263.456178] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x700000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:46 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:47 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @tick, 0xffffffffffffffff, {0x0, 0xfffffffffffffffe}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:47 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5332, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:47 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 264.333792] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 264.341208] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:47 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xe0ffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:47 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 264.508263] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 264.515710] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x700}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:47 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:48 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, 0x3}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:48 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', 'port0\x00'}, &(0x7f0000000140)=""/71, 0x47) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:48 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 265.368986] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 265.376421] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:48 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:48 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xfffffffd]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 265.548671] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 265.556130] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x800000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:48 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:49 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x49, @time={0x77359400}, 0x0, {}, 0x0, 0x2, 0xfff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x108, @time={0x77359400}, 0x100000000, {0xfff, 0x2}, 0x10000, 0x1, 0x7}) 00:42:49 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', 'port0\x00'}, &(0x7f0000000140)=""/71, 0x47) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:49 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 266.414132] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 266.421998] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:49 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:49 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 266.559423] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 266.566782] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xfdfdffff00000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:50 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:50 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'security.', 'port0\x00'}, &(0x7f0000000140)=""/71, 0x47) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:50 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 267.436114] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 267.443610] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 267.592961] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 267.600413] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:50 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:50 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:51 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @time}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:51 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xbf00000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:51 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:51 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 268.511538] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 268.518885] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:51 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x1100]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:51 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 268.666538] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 268.673930] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x8000) r2 = memfd_create(&(0x7f0000000180)='\x00', 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000001c0)=r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fchown(r0, r3, r4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:52 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 269.554443] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 269.561915] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xfffffdfd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:52 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xf00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 269.733679] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 269.741146] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/84, 0x54) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x8001, 0x80000000}, {}, 0xb150, 0x2, 0xcfe}) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x7fff) 00:42:53 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:53 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 270.619518] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 270.626929] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x4000000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:53 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:53 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:53 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 270.783589] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 270.791053] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:53 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x11]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:53 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:53 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:53 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:53 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 271.701562] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 271.709055] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:54 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x10000) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000040)={{0x1, 0x2, 0x5b7b, 0x0, 0x3}, 0x9, 0x7d50bfa2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:54 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:42:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x8000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:54 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:54 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 271.856832] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 271.864240] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:54 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x2]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:54 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 272.811319] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 272.818774] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:55 executing program 6: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10000, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d1000000930000009e31a03fe3389797d18cf7444bea272aedda2c27288058e0b3d0f68f9cbff4b0b646c21158e167b3ad853b1c9092eb6af9c835ce726e104f680ff10f406b7c4d6a1e5887edcdc662d4d2e226413e949e61d2322b8cc615e7a4831def7dcf6973e343c0ee02399b2453711624bbdc3add7755cb13320c6010adc007af783e17595a1f3995655d3969604df25912c48bdf7cc59d9cca9b85587a72af8fb91dce30c06923bea852aed35ac43dc134553c335f09e2491c697fd6d6db500928dde2afb79f13c460f066d807"], 0x300) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:55 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:42:55 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xbf000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 272.965598] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 272.973048] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:55 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:56 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:56 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 273.905069] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 273.912441] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 274.059707] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 274.067128] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:57 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:57 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xfdffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:42:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xfdfdffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:57 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:57 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @tick, 0x0, {0x3}, 0x6de}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:57 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 275.009217] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 275.016645] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:58 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:58 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:58 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:58 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 275.163661] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 275.171192] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xbf00}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:42:58 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:58 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) 00:42:58 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:58 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:58 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 276.056635] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 276.064112] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:59 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xfeffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:42:59 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:59 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 276.212346] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 276.219768] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:42:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x4000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:42:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:59 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x101}, 0xc) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:42:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:59 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:42:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:42:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 277.098927] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 277.106356] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:00 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:00 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:00 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 277.253663] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 277.261096] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:00 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:00 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x9, 0x400, 0x2, 0x6, 0x7d0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xfffffffffffffffa, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x100, 0x800, r3}) alarm(0xffffffffffffff7f) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:00 executing program 5: read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)) 00:43:00 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:00 executing program 5: read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)) [ 278.154384] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 278.161968] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:01 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x1100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:01 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:01 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:01 executing program 5: read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)) [ 278.308752] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 278.316234] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:01 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:01 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xbf}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:01 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:01 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:01 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 279.194787] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 279.202219] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:02 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:02 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 279.349654] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 279.357080] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:02 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x700000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:02 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:02 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x400) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @time={0x0, 0x989680}, 0x0, {0x0, 0x401}, 0x800}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/ppp\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/null\x00', 0x0, 0x0) r4 = dup2(r3, r2) setsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000580)={@broadcast=0xffffffff}, 0xc) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000005c0), 0x4) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000000)={0x8, 0x3, 0x100000001, 0x4}) socket$alg(0x26, 0x5, 0x0) 00:43:02 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 280.217912] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 280.225353] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:03 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xfeffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:03 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 280.372668] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 280.380109] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:03 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0xfdfdffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:03 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:03 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) lookup_dcookie(0x8, &(0x7f0000000000)=""/51, 0x33) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xf29, 0x408800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4c36, 0x181840) 00:43:03 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 281.282791] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 281.290253] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:04 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:04 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xe0ff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 281.437710] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 281.445147] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x700}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 6: socketpair$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x953, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:04 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 282.329597] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 282.337064] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:05 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:05 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) r1 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7fffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0xffffffffffffff6b, 0x3, 0x7}) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xed, 0x67, 0x8, 0x3, 0x0, 0x3, 0x68211, 0x1, 0x5, 0x8000, 0x100, 0x9, 0x1, 0x9, 0x45, 0x1, 0x2, 0x0, 0x2, 0x6, 0x1, 0x3f, 0x0, 0x6, 0x9, 0x9, 0x5, 0x19, 0x1, 0xff, 0x9, 0x0, 0xffffffffffffffe0, 0x9, 0x7, 0x43b6, 0x0, 0x2696, 0x3, @perf_bp={&(0x7f0000000040), 0xd}, 0x40, 0x1, 0x3ff, 0x5, 0x200, 0x2, 0x80000000000}, r2, 0xc, 0xffffffffffffff9c, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:05 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 282.483720] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 282.491117] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:05 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0xbf00}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 283.349403] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 283.356867] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:06 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x8]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:06 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 283.502892] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 283.510323] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:06 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:06 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @tick, 0xffffffffffffffff}) finit_module(r0, &(0x7f0000000000)='port0\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) ftruncate(r1, 0xc9d5) 00:43:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:06 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:06 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 284.377594] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 284.385045] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:07 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:07 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 284.531734] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 284.539149] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:07 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0xbf}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:07 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:07 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc058534f, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:07 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 285.405258] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 285.412705] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:08 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0xffffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:08 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 285.559635] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 285.567077] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:08 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x4000000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:08 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:08 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:08 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 286.440442] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 286.447870] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:09 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x20000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:09 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:09 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 286.593652] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 286.601095] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0xbf000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:09 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:09 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:09 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 287.471063] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 287.478480] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:10 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:10 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xfffffffe]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:10 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 287.626807] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 287.634184] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x40000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:10 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:11 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:11 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 288.506822] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 288.514268] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:11 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 288.661639] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 288.669077] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0xfffffdfd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:11 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:11 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:11 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:12 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:12 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 289.515903] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 289.523260] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:12 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xe0ffffffffffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 289.668735] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 289.676174] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0xbf00000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:13 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:13 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:13 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:13 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 290.524943] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 290.532384] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:13 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:13 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 290.680687] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 290.688099] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0xfdfdffff00000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:14 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:14 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 291.537140] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 291.544597] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:14 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 291.690688] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 291.698151] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x7}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:15 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:15 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:15 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:15 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 292.562950] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 292.570410] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:15 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xfffffffd]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:15 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 292.717432] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 292.724897] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x800000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:16 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:16 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:16 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:16 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 293.595274] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 293.602699] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:16 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:16 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 293.748679] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 293.756080] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x7000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:17 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)) 00:43:17 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:17 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:17 executing program 6: read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0x404c534a, &(0x7f00000001c0)) 00:43:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:17 executing program 6: read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0x404c534a, &(0x7f00000001c0)) [ 294.625914] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 294.633293] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:17 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:17 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:17 executing program 6: read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0x404c534a, &(0x7f00000001c0)) 00:43:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 294.780741] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 294.788173] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x8000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:18 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40600) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}, @empty, @empty, 0x0, 0x40, 0x0, 0x0, 0x6}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 00:43:18 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40bc5311, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 295.671819] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 295.679282] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:18 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x20000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:18 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 295.825755] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 295.833186] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x4000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:19 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 296.699796] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 296.707232] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:19 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40bc5311, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:19 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 296.854873] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 296.862283] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0xbf}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:20 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:20 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:20 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 297.744842] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 297.752294] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:20 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xf]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40bc5311, &(0x7f00000001c0)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 297.901760] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 297.909157] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0xfffffdfd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:21 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:21 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:21 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 298.778235] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 298.785755] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:21 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:21 executing program 5 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) [ 298.931893] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 298.939376] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c000020]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x700000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:21 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:22 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeb]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:22 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:22 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 299.802748] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 299.810370] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 299.939150] FAULT_INJECTION: forcing a failure. [ 299.939150] name fail_futex, interval 1, probability 0, space 0, times 0 [ 299.950697] CPU: 1 PID: 19632 Comm: syz-executor5 Not tainted 4.18.0-rc2+ #24 [ 299.957967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.967313] Call Trace: [ 299.969907] dump_stack+0x1c9/0x2b4 [ 299.973526] ? dump_stack_print_info.cold.2+0x52/0x52 [ 299.978713] should_fail.cold.4+0xa/0x1a [ 299.982767] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 299.987874] ? kasan_unpoison_shadow+0x35/0x50 [ 299.992452] ? kasan_alloc_pages+0x38/0x40 [ 299.996681] ? trace_hardirqs_on+0x10/0x10 [ 300.000908] ? check_noncircular+0x20/0x20 [ 300.005131] ? check_noncircular+0x20/0x20 [ 300.009353] ? __isolate_free_page+0x690/0x690 [ 300.013919] ? print_usage_bug+0xc0/0xc0 [ 300.017970] ? __lock_acquire+0x7fc/0x5020 [ 300.022193] get_futex_key+0x13db/0x1ea0 [ 300.026264] ? rb_next+0x140/0x140 [ 300.029802] ? futex_lock_pi_atomic+0x3a0/0x3a0 [ 300.034456] ? print_usage_bug+0xc0/0xc0 [ 300.038501] ? print_usage_bug+0xc0/0xc0 [ 300.042556] ? print_usage_bug+0xc0/0xc0 [ 300.046611] ? lock_downgrade+0x8f0/0x8f0 [ 300.050745] ? __lock_acquire+0x7fc/0x5020 [ 300.054970] ? __lock_acquire+0x7fc/0x5020 [ 300.059207] ? print_usage_bug+0xc0/0xc0 [ 300.063275] ? check_noncircular+0x20/0x20 [ 300.067503] ? print_usage_bug+0xc0/0xc0 [ 300.071552] ? __lock_acquire+0x7fc/0x5020 [ 300.075775] ? check_noncircular+0x20/0x20 [ 300.080019] ? print_usage_bug+0xc0/0xc0 [ 300.084073] ? print_usage_bug+0xc0/0xc0 [ 300.088132] ? __lock_acquire+0x7fc/0x5020 [ 300.092440] ? print_usage_bug+0xc0/0xc0 [ 300.096594] ? __lock_acquire+0x7fc/0x5020 [ 300.100821] ? graph_lock+0x170/0x170 [ 300.104607] ? graph_lock+0x170/0x170 [ 300.108412] ? __lock_acquire+0x7fc/0x5020 [ 300.112642] ? trace_hardirqs_on+0x10/0x10 [ 300.116871] ? __update_load_avg_blocked_se.isra.33+0x460/0x460 [ 300.122924] ? print_usage_bug+0xc0/0xc0 [ 300.127055] ? update_load_avg+0x2de/0x2590 [ 300.131365] ? print_usage_bug+0xc0/0xc0 [ 300.135417] ? print_usage_bug+0xc0/0xc0 [ 300.139646] ? attach_entity_load_avg+0x860/0x860 [ 300.144504] ? print_usage_bug+0xc0/0xc0 [ 300.148555] futex_wake+0x1ac/0x760 [ 300.152173] ? __lock_acquire+0x7fc/0x5020 [ 300.156402] ? __lock_acquire+0x7fc/0x5020 [ 300.160631] ? get_futex_key+0x1ea0/0x1ea0 [ 300.164859] ? __lock_acquire+0x7fc/0x5020 [ 300.169084] ? __lock_acquire+0x7fc/0x5020 [ 300.173306] do_futex+0x300/0x27d0 [ 300.176833] ? trace_hardirqs_on+0x10/0x10 [ 300.181068] ? exit_robust_list+0x290/0x290 [ 300.185392] ? trace_hardirqs_on+0x10/0x10 00:43:23 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x2000000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:23 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 300.189616] ? graph_lock+0x170/0x170 [ 300.193407] ? trace_hardirqs_on+0x10/0x10 [ 300.197722] ? graph_lock+0x170/0x170 [ 300.201521] ? graph_lock+0x170/0x170 [ 300.205320] ? graph_lock+0x170/0x170 [ 300.209123] ? graph_lock+0x170/0x170 [ 300.212919] ? find_held_lock+0x36/0x1c0 [ 300.216976] ? graph_lock+0x170/0x170 [ 300.220793] ? find_held_lock+0x36/0x1c0 [ 300.224864] ? find_held_lock+0x36/0x1c0 [ 300.228938] ? find_held_lock+0x36/0x1c0 [ 300.233019] ? lock_downgrade+0x8f0/0x8f0 [ 300.237175] ? lock_release+0xa30/0xa30 [ 300.241159] ? check_same_owner+0x340/0x340 [ 300.245487] ? native_load_gs_index+0x2d/0x30 [ 300.250003] mm_release+0x46a/0x5f0 [ 300.253637] ? mm_access+0x160/0x160 [ 300.257367] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 300.262395] ? trace_hardirqs_on+0xd/0x10 [ 300.266557] ? _raw_spin_unlock_irq+0x27/0x70 [ 300.271066] ? acct_collect+0x70c/0x860 [ 300.275052] do_exit+0x567/0x2750 [ 300.278528] ? mm_update_next_owner+0x9a0/0x9a0 [ 300.283243] ? print_usage_bug+0xc0/0xc0 [ 300.283262] ? trace_hardirqs_on+0x10/0x10 [ 300.291550] ? finish_task_switch+0x2ca/0x890 [ 300.296085] ? preempt_notifier_register+0x200/0x200 [ 300.296105] ? lock_repin_lock+0x430/0x430 [ 300.296126] ? __lock_acquire+0x7fc/0x5020 [ 300.296140] ? __schedule+0x884/0x1ed0 [ 300.296164] ? trace_hardirqs_on+0x10/0x10 [ 300.296177] ? graph_lock+0x170/0x170 [ 300.296189] ? graph_lock+0x170/0x170 [ 300.296203] ? print_usage_bug+0xc0/0xc0 [ 300.296217] ? print_usage_bug+0xc0/0xc0 [ 300.296240] ? find_held_lock+0x36/0x1c0 [ 300.296261] ? __lock_acquire+0x7fc/0x5020 [ 300.296276] ? lock_downgrade+0x8f0/0x8f0 [ 300.296290] ? debug_mutex_add_waiter+0x230/0x230 [ 300.296308] ? graph_lock+0x170/0x170 [ 300.296326] ? trace_hardirqs_on+0x10/0x10 [ 300.296343] ? memset+0x31/0x40 [ 300.296362] ? find_held_lock+0x36/0x1c0 [ 300.296388] ? lock_downgrade+0x8f0/0x8f0 [ 300.370411] do_group_exit+0x177/0x440 [ 300.374311] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 300.378943] ? __ia32_sys_exit+0x50/0x50 [ 300.383045] ? _raw_spin_unlock_irq+0x27/0x70 [ 300.387554] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 300.392587] get_signal+0x88e/0x1970 [ 300.396321] ? ptrace_notify+0x130/0x130 [ 300.400412] ? kasan_check_write+0x14/0x20 [ 300.404661] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 300.409605] ? lock_downgrade+0x8f0/0x8f0 [ 300.413768] ? wait_for_completion+0x8d0/0x8d0 [ 300.418354] ? mark_held_locks+0xc9/0x160 [ 300.422505] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 300.427099] do_signal+0x9c/0x21c0 [ 300.430649] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 300.435653] ? trace_hardirqs_on+0xd/0x10 [ 300.439799] ? queueptr+0x9e/0xb0 [ 300.443242] ? setup_sigcontext+0x7d0/0x7d0 [ 300.447568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.453101] ? snd_seq_ioctl+0x2e9/0x440 [ 300.457152] ? snd_seq_open+0x5c0/0x5c0 [ 300.461135] ? exit_to_usermode_loop+0x8c/0x370 [ 300.465804] exit_to_usermode_loop+0x2e0/0x370 [ 300.470387] ? syscall_slow_exit_work+0x500/0x500 [ 300.475225] ? snd_seq_ioctl+0x440/0x440 [ 300.479278] ? __ia32_compat_sys_ioctl+0x184/0x640 [ 300.484206] do_fast_syscall_32+0xcd5/0xfb2 [ 300.488524] ? do_int80_syscall_32+0x890/0x890 [ 300.493105] ? _raw_spin_unlock_irq+0x27/0x70 [ 300.497610] ? finish_task_switch+0x1d3/0x890 [ 300.502105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.507640] ? syscall_return_slowpath+0x31d/0x5e0 [ 300.512562] ? sysret32_from_system_call+0x5/0x46 [ 300.517405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.522236] entry_SYSENTER_compat+0x70/0x7f [ 300.526630] RIP: 0023:0xf7fb5cb9 [ 300.529984] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 300.549327] RSP: 002b:00000000f5f6f0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 300.557031] RAX: ffffffffffffffea RBX: 0000000000000013 RCX: 00000000c08c5334 [ 300.564294] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.571598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 300.578851] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 00:43:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)) 00:43:23 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0xfdfdffff00000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:23 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 300.586122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:43:23 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff97]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:23 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 301.066872] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 301.074304] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:24 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x11000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:24 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 301.221982] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 301.229394] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x402c582a, &(0x7f00000001c0)) 00:43:24 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x1c, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:24 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:24 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:24 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 302.091147] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 302.098581] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:25 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x2000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 302.243751] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 302.251213] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0305302, &(0x7f00000001c0)) 00:43:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:25 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x20000080, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x40000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:25 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 303.114594] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 303.122125] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:26 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xfeffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 303.269846] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 303.277271] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc02c5341, &(0x7f00000001c0)) 00:43:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:26 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x34000}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x7000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 304.146983] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 304.154373] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:27 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xf00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 304.301665] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 304.309069] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0a45352, &(0x7f00000001c0)) 00:43:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:27 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x200037c1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x8000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:27 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 305.176820] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 305.184255] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:28 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 305.331713] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 305.339124] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0a85320, &(0x7f00000001c0)) 00:43:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:28 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x6}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:28 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0xbf000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:29 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 306.204662] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 306.212202] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:29 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:29 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 306.368647] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 306.376074] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)) 00:43:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:30 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x700}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:30 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x8}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:30 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:30 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffdffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 307.251807] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 307.259360] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:30 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:30 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x11]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdef]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 307.427784] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 307.435252] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0bc5310, &(0x7f00000001c0)) 00:43:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00002000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:31 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0xffffffe0}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:31 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0xbf00000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 308.310968] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 308.318362] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 308.468698] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 308.477133] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:31 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xffffffffffffffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc020660b, &(0x7f00000001c0)) 00:43:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:32 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000008c]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:32 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:32 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x4}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x4000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 309.406410] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 309.413865] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:32 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebff000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 309.565349] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 309.572784] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:32 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:32 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 310.473439] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 310.480827] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x5460, &(0x7f00000001c0)) 00:43:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0x404c534a, &(0x7f00000001c0)) 00:43:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x2}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x800000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0xf, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:33 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xfeffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 310.626164] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 310.633666] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x20000080, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x20000340, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 311.542574] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 311.549978] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40605346, &(0x7f00000001c0)) 00:43:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8c000020, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:34 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x4000000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:34 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x33c00}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000540)="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") read(r0, &(0x7f0000003700)=""/4096, 0xfffffffffffffc2c) 00:43:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x97ffffff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 311.703399] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 311.710808] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:34 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:34 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:43:34 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x2, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffff000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 312.659011] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 312.666426] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0a45320, &(0x7f00000001c0)) 00:43:35 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:35 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in6, 0x0, 0xa}, [@srcaddr={0x14, 0xd, @in=@multicast1=0xe0000001}]}, 0x3c}, 0x1}, 0x0) 00:43:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x900, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0xfdfdffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:35 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0xfffffdef}], 0x1, &(0x7f0000003940)}, 0x0) [ 312.812738] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 312.820145] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:35 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x700, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:35 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400010000000000000000000a000000", @ANYBLOB="1400020000000000000000000000ffffac14145d08000800000400001400060000000000030000000000000000000000"], 0x2}, 0x1}, 0x0) 00:43:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:35 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:35 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 00:43:35 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xeffdffff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:36 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 313.759527] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 313.766954] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40a85323, &(0x7f00000001c0)) 00:43:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:36 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = dup(r0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x7fff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 00:43:36 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0xbf00}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:36 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x50}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:36 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 313.915717] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 313.923260] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:36 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffffc0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:36 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:37 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x4, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:37 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xebff000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:37 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 314.429306] device lo entered promiscuous mode [ 314.482436] device lo left promiscuous mode [ 314.796079] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 314.803498] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 314.922236] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 314.950649] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 314.958119] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:37 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:37 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x80045301, &(0x7f00000001c0)) 00:43:37 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffff97, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:37 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x7ffff000}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:37 executing program 6: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) lsetxattr(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d230000008f73"], &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x1d, 0x1) recvmmsg(r0, &(0x7f0000002440)=[{{&(0x7f0000002200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002300), 0x0, &(0x7f0000002340)=""/200, 0xc8}}], 0x1, 0x0, &(0x7f0000002540)) lstat(&(0x7f0000003700)='./file0/file0\x00', &(0x7f0000003740)) execve(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f00000003c0)=[&(0x7f00000002c0)='/selinux/avc/cache_threshold\x00'], &(0x7f0000000500)=[&(0x7f00000004c0)='$eth1\x00']) unshare(0x28020400) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x800, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1003, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) rmdir(&(0x7f0000000400)='./file0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f6367726f75702e6e657400651479c6a272e021ea2f408639284bb1d3f9e988cc4deba2827a8a2d4dacbbeb3dd4856db5bf59e3", 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) lseek(r3, 0x1000, 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@loopback=0x7f000001]}, 0x14) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000231000)={@multicast2=0xe0000002, @loopback=0x7f000001, @broadcast=0xffffffff}, 0xc) 00:43:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x7}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:37 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xfdffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1400000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:38 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xf401000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0xf, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:38 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x14000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x20000080, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x20000340, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe8030000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 315.865878] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 315.873260] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 316.022690] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 316.030100] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:39 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x541b, &(0x7f00000001c0)) 00:43:39 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x7000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8c00002000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:39 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0xffffff50}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:39 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xf000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:39 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:43:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe00, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xf4010000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:39 executing program 6: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) sendmsg(r0, &(0x7f0000000300)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x800, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x2}], 0x10}, 0x0) 00:43:39 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffff97, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:39 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffff7f, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:39 executing program 6: 00:43:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x2000008c, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 317.019731] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 317.027151] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 317.178580] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 317.186127] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc058534f, &(0x7f00000001c0)) 00:43:40 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:40 executing program 6: 00:43:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xf401, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa00000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:40 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x3}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:40 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x1100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x14, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:40 executing program 6: 00:43:40 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x4000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:40 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1f4, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:40 executing program 6: 00:43:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1400, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:40 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 318.112449] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 318.119844] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 318.266636] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 318.274165] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc04c5349, &(0x7f00000001c0)) 00:43:41 executing program 6: 00:43:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe00, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x800000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:41 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0xffffffffffffff50}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:41 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xffffffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000008c0)=0x7fe, 0x370) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 00:43:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x4000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x200000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x4000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:41 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe000000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:41 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 319.282580] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 319.290047] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 319.442302] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 319.449815] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x80045300, &(0x7f00000001c0)) 00:43:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x9, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa00000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:42 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfdfdffff00000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:42 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x5}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:42 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xeffdffff00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:42 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x2) readv(r2, &(0x7f0000000200)=[{&(0x7f00000012c0)=""/180, 0xb4}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 00:43:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1f4, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:42 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x100000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe803000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:42 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x800000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x9000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 320.433347] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 320.440802] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 320.587854] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 320.595289] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0189436, &(0x7f00000001c0)) 00:43:43 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffff7f00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffff0000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xbf}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:43 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0xff50}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:43 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xe0ffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x9000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:43 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:43:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x2, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x7, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:43 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:43 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffeb, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:43 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe803000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:43 executing program 6: 00:43:43 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 321.591745] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 321.599235] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 321.745933] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 321.753337] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5332, &(0x7f00000001c0)) 00:43:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:44 executing program 6: 00:43:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:44 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1300}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:44 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x1100]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:44 executing program 6: 00:43:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe803, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x700000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:44 executing program 6: 00:43:44 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xc0ffffff00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:44 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x40000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:45 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 322.689865] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 322.697252] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 322.845860] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 322.853252] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40a45323, &(0x7f00000001c0)) 00:43:45 executing program 6: 00:43:45 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xc0ffffff00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:45 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x900000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:45 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xbf00}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:45 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x33c00, &(0x7f0000003940)}, 0x0) 00:43:45 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xe0ff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:46 executing program 6: 00:43:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x2000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:46 executing program 6: 00:43:46 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:46 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x14000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:46 executing program 6: 00:43:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1400, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 323.889474] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 323.896888] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 324.018370] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 324.025758] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0a45322, &(0x7f00000001c0)) 00:43:47 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x2000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:47 executing program 6: 00:43:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xfffffdef, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:47 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x2, &(0x7f0000003940)}, 0x0) 00:43:47 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xc0ffffff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x900, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:47 executing program 6: 00:43:47 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:47 executing program 6: 00:43:47 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x400000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x200000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:47 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 324.993111] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 325.000552] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 325.147541] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 325.155610] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x5452, &(0x7f00000001c0)) 00:43:48 executing program 6: 00:43:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa00, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:48 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:48 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0xfffffdef, &(0x7f0000003940)}, 0x0) 00:43:48 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xf00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:48 executing program 6: 00:43:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:48 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xf401, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:48 executing program 6: 00:43:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xebff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:48 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x7, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:48 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 326.069466] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 326.076871] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 326.224063] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 326.231437] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xc0ffffff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40bc5311, &(0x7f00000001c0)) 00:43:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:49 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x1000000}, 0x8}) 00:43:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfdfdffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:49 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x108) 00:43:49 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0xffffff50, &(0x7f0000003940)}, 0x0) 00:43:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffeb, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:49 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 00:43:49 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x10000000}, 0x8}) 00:43:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x900000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) 00:43:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x700, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:49 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe000000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:49 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0xffc99a3b00000000}, 0x8}) 00:43:49 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffff000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 327.192620] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 327.200081] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 327.348715] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 327.357107] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40049409, &(0x7f00000001c0)) 00:43:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x800000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x400000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:50 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x1000000000000000}, 0x8}) 00:43:50 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) 00:43:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:50 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1300, &(0x7f0000003940)}, 0x0) 00:43:50 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe00000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x40000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:50 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)=ANY=[@ANYBLOB="020300090c000000ffffffffffffffff02001300020000000000000000000000030006000000000002004e20e0000001000000000000002402000100f8ffffff000000020000000003000500000000000200927ee8dcc79d8a59000000000000"], 0x60}, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0x0, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}, 0x1}, 0x0) 00:43:50 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x1000000000000}, 0x8}) 00:43:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe0000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:50 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe803, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:50 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:50 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x1600000000000000}, 0x8}) [ 328.373756] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 328.381226] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 328.499942] sctp: sctp_transport_update_pmtu: Reported pmtu 72 too low, using default minimum of 512 [ 328.528773] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 328.536216] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:51 executing program 6: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="014d06cb8916", @random="471a32d2e30c", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x4000, 0x4e21, 0x8}}}}}, 0x0) 00:43:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffff0000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:51 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x100000000000000}, 0x8}) 00:43:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffdfd}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:51 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x6, &(0x7f0000003940)}, 0x0) 00:43:51 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0xfdffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1400000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x9, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:51 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000080), 0x20, 0x0) 00:43:51 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x1600}, 0x8}) 00:43:51 executing program 6: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x34000}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:51 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:51 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:51 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x16}, 0x8}) [ 329.491862] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 329.499334] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 329.650596] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 329.658065] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0a85322, &(0x7f00000001c0)) 00:43:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xebff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa00, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:52 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x3b9ac9ff}, 0x8}) 00:43:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4000000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:52 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x3, &(0x7f0000003940)}, 0x0) 00:43:52 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:52 executing program 6 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x2000008c, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffff7f, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:52 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x10}, 0x8}) 00:43:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x4, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xebff0000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:52 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x16000000}, 0x8}) 00:43:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffff7f00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:52 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xa, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 330.641825] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 330.649294] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 330.795702] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 330.803082] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 330.817513] FAULT_INJECTION: forcing a failure. [ 330.817513] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 330.829837] CPU: 1 PID: 21411 Comm: syz-executor6 Not tainted 4.18.0-rc2+ #24 [ 330.837118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.846478] Call Trace: [ 330.849079] dump_stack+0x1c9/0x2b4 [ 330.852726] ? dump_stack_print_info.cold.2+0x52/0x52 [ 330.857946] should_fail.cold.4+0xa/0x1a [ 330.862031] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.867291] ? lock_acquire+0x1e4/0x540 [ 330.871369] ? find_held_lock+0x36/0x1c0 [ 330.875443] ? lock_downgrade+0x8f0/0x8f0 [ 330.879580] ? __lock_acquire+0x7fc/0x5020 [ 330.883801] ? kernel_poison_pages+0x136/0x220 [ 330.888385] ? kasan_check_read+0x11/0x20 [ 330.892519] ? rcu_is_watching+0x8c/0x150 [ 330.896665] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 330.901063] ? rcu_read_lock+0x70/0x70 [ 330.904939] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.910464] __alloc_pages_nodemask+0x36e/0xdb0 [ 330.915131] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 330.920156] ? graph_lock+0x170/0x170 [ 330.923961] ? lock_acquire+0x1e4/0x540 [ 330.927932] ? lock_release+0xa30/0xa30 [ 330.931901] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 330.937445] alloc_pages_current+0x10c/0x210 [ 330.941850] __get_free_pages+0xf/0x40 [ 330.945726] __tlb_remove_page_size+0x2e5/0x500 [ 330.950379] unmap_page_range+0x1059/0x2220 [ 330.954708] ? vm_normal_page_pmd+0x3f0/0x3f0 [ 330.959215] ? kasan_check_read+0x11/0x20 [ 330.963350] ? rcu_is_watching+0x8c/0x150 [ 330.967480] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 330.971885] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 330.976285] ? is_bpf_text_address+0xd7/0x170 [ 330.980766] ? kernel_text_address+0x79/0xf0 [ 330.985165] ? __kernel_text_address+0xd/0x40 [ 330.989658] ? unwind_get_return_address+0x61/0xa0 [ 330.994574] ? graph_lock+0x170/0x170 [ 330.998364] ? find_held_lock+0x36/0x1c0 [ 331.002415] ? lock_downgrade+0x8f0/0x8f0 [ 331.006559] ? kasan_check_read+0x11/0x20 [ 331.010700] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 331.016229] ? uprobe_munmap+0x14c/0x440 [ 331.020283] ? uprobe_mmap+0xd20/0xd20 [ 331.024153] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 331.028718] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 331.033807] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 331.038825] unmap_single_vma+0x1a0/0x310 [ 331.042964] unmap_vmas+0x120/0x1f0 [ 331.046585] exit_mmap+0x2c2/0x5b0 [ 331.050111] ? __ia32_sys_munmap+0x80/0x80 [ 331.054334] ? __khugepaged_exit+0x455/0x6a0 [ 331.058745] mmput+0x265/0x620 [ 331.061925] ? lock_downgrade+0x801/0x8f0 [ 331.066059] ? set_mm_exe_file+0x200/0x200 [ 331.070290] ? kasan_check_read+0x11/0x20 [ 331.074447] ? do_raw_spin_unlock+0xa7/0x2f0 [ 331.078857] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 331.083435] ? kasan_check_write+0x14/0x20 [ 331.087669] ? do_raw_spin_lock+0xc1/0x200 [ 331.091892] do_exit+0xea9/0x2750 [ 331.095341] ? trace_hardirqs_on+0xd/0x10 [ 331.099477] ? mm_update_next_owner+0x9a0/0x9a0 [ 331.104141] ? print_usage_bug+0xc0/0xc0 [ 331.108187] ? trace_hardirqs_on+0x10/0x10 [ 331.112413] ? finish_task_switch+0x600/0x890 [ 331.116899] ? preempt_notifier_register+0x200/0x200 [ 331.121985] ? lock_repin_lock+0x430/0x430 [ 331.126217] ? __lock_acquire+0x7fc/0x5020 [ 331.130434] ? __schedule+0x884/0x1ed0 [ 331.134321] ? trace_hardirqs_on+0x10/0x10 [ 331.138542] ? print_usage_bug+0xc0/0xc0 [ 331.142588] ? graph_lock+0x170/0x170 [ 331.146374] ? graph_lock+0x170/0x170 [ 331.150158] ? print_usage_bug+0xc0/0xc0 [ 331.154215] ? __lock_acquire+0x7fc/0x5020 [ 331.158436] ? lock_downgrade+0x8f0/0x8f0 [ 331.162573] ? graph_lock+0x170/0x170 [ 331.166366] ? do_raw_spin_unlock+0xa7/0x2f0 [ 331.170759] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 331.175328] ? debug_mutex_wake_waiter+0x630/0x630 [ 331.180246] ? memset+0x31/0x40 [ 331.183513] ? find_held_lock+0x36/0x1c0 [ 331.187568] ? lock_downgrade+0x8f0/0x8f0 [ 331.191716] do_group_exit+0x177/0x440 [ 331.195604] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 331.200169] ? __ia32_sys_exit+0x50/0x50 [ 331.204213] ? _raw_spin_unlock_irq+0x27/0x70 [ 331.208691] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 331.213689] get_signal+0x88e/0x1970 [ 331.217388] ? ptrace_notify+0x130/0x130 [ 331.221435] ? kasan_check_write+0x14/0x20 [ 331.225652] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 331.230564] ? wait_for_completion+0x8d0/0x8d0 [ 331.235129] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 331.240218] do_signal+0x9c/0x21c0 [ 331.243742] ? queueptr+0x9e/0xb0 [ 331.247180] ? snd_seq_queue_use+0x72/0x90 [ 331.251402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.256943] ? setup_sigcontext+0x7d0/0x7d0 [ 331.261250] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.266774] ? snd_seq_ioctl+0x2e9/0x440 [ 331.270818] ? snd_seq_open+0x5c0/0x5c0 [ 331.274790] ? exit_to_usermode_loop+0x8c/0x370 [ 331.279445] exit_to_usermode_loop+0x2e0/0x370 [ 331.284016] ? syscall_slow_exit_work+0x500/0x500 [ 331.288862] ? snd_seq_ioctl+0x440/0x440 [ 331.292922] ? __ia32_compat_sys_ioctl+0x184/0x640 [ 331.297840] do_fast_syscall_32+0xcd5/0xfb2 [ 331.302144] ? do_int80_syscall_32+0x890/0x890 [ 331.306713] ? kasan_check_write+0x14/0x20 [ 331.310932] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 331.316450] ? syscall_return_slowpath+0x31d/0x5e0 [ 331.321364] ? sysret32_from_system_call+0x5/0x46 [ 331.326187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.331017] entry_SYSENTER_compat+0x70/0x7f [ 331.335499] RIP: 0023:0xf7ff0cb9 [ 331.338846] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 331.358123] RSP: 002b:00000000f5faa0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 331.366516] RAX: ffffffffffffffea RBX: 0000000000000013 RCX: 00000000404c534a [ 331.373775] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 331.381036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 331.388293] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 00:43:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x5450, &(0x7f00000001c0)) 00:43:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x97ffffff00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8c00002000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:54 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0xffc99a3b}, 0x8}) 00:43:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xbf00000000000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:54 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x200037c1, &(0x7f0000003940)}, 0x0) 00:43:54 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:54 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) [ 331.395567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 00:43:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xebff000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x97ffffff00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:54 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x20349008}) 00:43:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x3e8, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xf401000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:54 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x20a66000}) 00:43:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x3e8, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:54 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x700000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 332.243583] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 332.251067] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 332.398638] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 332.406271] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0605345, &(0x7f00000001c0)) 00:43:55 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x20086008}) 00:43:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xeffdffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xffffffc0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xbf000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:55 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x4, &(0x7f0000003940)}, 0x0) 00:43:55 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x4000, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xa4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x60) 00:43:55 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x2000000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe803}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:55 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x20768008}) 00:43:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xeffdffff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x9}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:55 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x20f33fc8}) 00:43:55 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe8030000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:55 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 333.357858] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 333.365284] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 333.516854] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 333.524344] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x3e8}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x2, &(0x7f00000001c0)) 00:43:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x14, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x8, &(0x7f0000003940)}, 0x0) 00:43:56 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x16}) 00:43:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) connect$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) r2 = syz_open_dev$dspn(&(0x7f00000007c0)='/dev/dsp#\x00', 0x29, 0x42000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000800)={0x2, [0x0, 0x0]}, &(0x7f0000000840)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000880)={r3}, 0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x11000000000, 0x7f5, 0x5, 0x6, 0x6, 0x6, 0x2, 0x1, 0x6, 0x100000000, 0x80000001}, 0xb) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x40000000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:56 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xffffff7f]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x7000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xfffffdef, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x2a}) 00:43:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe00000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x1000000000000, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x800) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000140)="62cebd1549c0865b6a1ad23eedd62affafabe700b14b745cd0e97075b9c46dbedbb583f758f565136edc6dce2b18315baa84a92273b7de78c4af04ee389444d9f9e114976176a6ffeefc4e60169cc5f2b9f053db02f916112c42345b27935d6b948197d48e7600c6043d6c2b27904818bcb51ae63c94bc211f7490f81ee89520f3b772e7ee40bb1678eefa97ef4c3c476407a29bc03266d04fdacbe7caedeaaabb6ed5925fd1127fb9e38ddf36fea6730e09453c23f04607a95bb0a2fa7f3c174e11bc37f8c182933984f4def009c6b3e2e9b24303ef6df5bd9907254d2305488f", 0xe1) 00:43:56 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xeffdffff00000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:56 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 334.505506] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 334.512941] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 334.663889] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 334.671392] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x4040534e, &(0x7f00000001c0)) 00:43:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x97ffffff, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x900000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000080)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x7f) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f0000000040)={0x1000}) 00:43:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:57 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x5, &(0x7f0000003940)}, 0x0) 00:43:57 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xf4010000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x900}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x1) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000240)={0xffffffff7fffffff, 0x2ddb, 0x2, 'queue0\x00', 0xbec5}) unshare(0x400) pwrite64(r0, &(0x7f0000000140)="6242be34db7892c4d76260b40280e4c3cfd01be226336993671f752afd67b43dcf2c01a180f1d8b8aed7e891f47681cc7e12f08bd445a91a70a4c33ad6d0403fb91095388200ab0d3cfb16e0e6ec925e39809b42ad64654b3448b7d89d7ff8fe976a1da3c54c5b89469831050eacbdb440c7592495a25cc9db07a199444f509934d95f93c9f58298a2837f0807fe28cde9928a44a80cdb33f4716c94a6b58621cb0001", 0xffffffffffffffbd, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f00000000c0), 0x40, &(0x7f0000ffd000/0x1000)=nil, 0x1) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000200)=""/43) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x5, 0x4) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:43:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x4000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x100000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x100000000000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x97ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:57 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x42, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000200)={0x7, 0xf5, "28ccd789116b07e7f47a1da9ec59c3e56257074e81bb311ba6694385c8904b9377c6ff97a3aba205fff7e8a1edab013c2e599baa18063ecf9a45019b41821cacd99b50f78af68d76f760d98a644f8d46194c2f111f38213778aa5b03cea8124bba99af48d2f29657a61554e6f58e4544e0a525d0d7699b8d21c0aecf7f16e99b8bc67645a71ec2a17fb1fa594fc0225e8306ef79498f1fd190fce2eaa9994ead650d54c73708932aecedb58b250fcddf31660b4930f611d39f9553d7cea84a7c28a2a7aea66701e459c46571d7d54b8ac2e015af02a511848791d569b4b275018eb3fad98e39c84f45aa37a875494460a8c6dd1036"}) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000080)=""/83, &(0x7f0000000100)=0x53) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0xfffffffffffffffa, 0x4e, 0xc298, 0xf5, 0xb}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000400)={r2, 0x400, 0x20, 0xb5, 0x80000000}, &(0x7f0000000440)=0x18) [ 335.717819] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 335.725270] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x4058534c, &(0x7f00000001c0)) 00:43:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x1000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:58 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x40000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:58 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x3ff, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt(r0, 0x7, 0x1, &(0x7f0000000180)="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", 0x1000) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0xfffffffffffffff7, 0x3}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0xb}) [ 335.873092] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 335.880572] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2400c0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:43:58 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0xffffffe0, &(0x7f0000003940)}, 0x0) 00:43:58 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:43:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x8]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:43:58 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffeb}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xebff0000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:58 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000000000004000, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2000, 0x0) unshare(0x400) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x424b, 0x2000) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x3f4}, &(0x7f0000086000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}, {0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x18}, 0x1}, 0x14, [0xff, 0xff, 0x3, 0x88, 0x20, 0x5, 0xcde, 0x4]}, 0x5c) 00:43:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe0000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x14}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x8c000020, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:59 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 336.803978] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 336.811453] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:43:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40a45321, &(0x7f00000001c0)) 00:43:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x97ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:59 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x7000000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:43:59 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 336.957827] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 336.965376] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:00 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x420300, 0x0) bind$can_raw(r1, &(0x7f0000000040)={0x1d}, 0x10) read(r0, &(0x7f0000000380)=""/140, 0x8c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:00 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x7ffff000, &(0x7f0000003940)}, 0x0) 00:44:00 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x4000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0xe000, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:00 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0x101}, &(0x7f0000000140), &(0x7f0000000180)={0x0, 0x989680}, 0x8) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x8, 0x5cb, 0xbd, 'queue0\x00', 0x81}) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x700}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:00 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7, 0x4, 0x1ff, 0x7, 0x4, 0x6, 0x5, 0x9, 0x2, 0x1000, 0x200, 0xfffffffffffffffd}) eventfd2(0x0, 0x800) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000014c0)=ANY=[@ANYPTR64=&(0x7f0000001480)=ANY=[@ANYPTR=&(0x7f00000013c0)=ANY=[@ANYPTR64, @ANYRES16, @ANYBLOB="04639edd85d34bbd1e7870ef05c5fcc4785564efc73d2265abac9808577a75e8292231cc2c575865d2358c0f53a76c095f9c68aa770412bda5922b54d9a70782b3ff46ec484f3b7e61ab9fe67e42dd578c051b3bc4d27fe92cfd6dda2b204ebed1f3f19634cf28873b8977c6"], @ANYPTR64=&(0x7f0000001440)=ANY=[@ANYPTR, @ANYPTR]]]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x6, 0xfffffffffffffff8, 0x7, 0x408000000000000, 0x8, 0x3, 0xfffffffffffffff9, 0x5, r2}, &(0x7f00000001c0)=0x16) r3 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0xffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:00 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xf4010000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 337.966694] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 337.974096] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x4020940d, &(0x7f00000001c0)) 00:44:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x700000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:01 executing program 2: getgroups(0x1, &(0x7f0000000000)=[0xee00]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r5 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r7 = getegid() setgroups(0x8, &(0x7f0000000380)=[r0, r1, r2, r3, r4, r5, r6, r7]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x40000000000}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:01 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 338.124467] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 338.131940] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:01 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="b55174e33edac69a0100100080e0fa758f8113d3d98931ae03e13714c8bc7c6e3e55b78d7f0150019f9c1cc470fa8c68e09a6e1b606f646a2d8a60e934", @ANYRES32=r1], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)=""/4096}, {&(0x7f0000001340)=""/203, 0x26}, {&(0x7f0000000140)=""/119}, {&(0x7f0000001440)=""/133}, {&(0x7f0000000080)=""/47}, {&(0x7f0000001500)=""/79}]}}], 0x2a37, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:01 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x50, &(0x7f0000003940)}, 0x0) 00:44:01 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xffffffe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0xbf000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:01 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xebff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x200000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:01 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x8) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)) 00:44:01 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:01 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\x00', 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x1000, "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"}, &(0x7f0000000040)=0x1024) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{0xa, 0x100000000}, {0x8}, {0x3}, {0x3, 0x80000001}, {0x3, 0x8}, {0x3, 0x1}, {0xb, 0x600000000000}], 0x7) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:01 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 339.124700] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 339.132149] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:02 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0bc5351, &(0x7f00000001c0)) 00:44:02 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x8000000) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x2000008c}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 339.286240] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 339.293655] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:02 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) socketpair$inet(0x2, 0x7, 0x675, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) write$sndseq(r0, &(0x7f0000000080)=[{0x200, 0x8, 0xf645, 0x5, @time, {0x3, 0x45e}, {0x8, 0x3f}, @note={0x87, 0x3, 0x0, 0x6, 0x2}}, {0x936, 0x5, 0x5, 0xa297, @time, {0x6, 0x4}, {0x1, 0x2}, @connect={{0x3ff, 0xffffffffffffff3a}, {0x5, 0x6}}}, {0x155218b0, 0x2, 0x9, 0x6, @tick=0x297, {0x19, 0x8268}, {0x1, 0x96}, @raw8={"2c2755388f0e89d67e3ac0cb"}}, {0x6, 0x81, 0x8, 0x8e4, @time={0x77359400}, {0x100, 0x32e9}, {0xffffffff80000000, 0x6}, @ext={0x28, &(0x7f0000000040)="1ef7bf2fd684bba8d4e81e1d69e58252edaebed0d1f9e8800f9d28ad68b6d323c08ad4f2243f825a"}}], 0x70) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:02 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x34000, &(0x7f0000003940)}, 0x0) 00:44:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xebff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe8030000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:02 executing program 2: r0 = memfd_create(&(0x7f0000000180)='\'Pvmnet0^lo-+\\wlan0\x00', 0x2) accept4$packet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x14, 0x80000) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000580)=&(0x7f00000001c0)) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000040)=""/148) getsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000440)={@multicast2, @dev, @local}, &(0x7f0000000480)=0xffffffffffffff11) r4 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@loopback=0x7f000001, 0x4e22, 0x6, 0x4e22, 0x401, 0x0, 0x80, 0xe80f9610d33e3145, 0x5e, r1, r5}, {0xff, 0x5, 0x7be7, 0x8, 0x3ff, 0xe2ec, 0x1f, 0x3}, {0x606, 0x3, 0x7, 0x10000}, 0x8, 0x6e6bbd, 0x0, 0x1, 0x3}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d2, 0x6c}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3507, 0x1, 0x3, 0x7f, 0x20, 0x3, 0x7ff}}, 0xe8) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000000)={0x101, 0x3f, 0x6d59, 0x0, 0x5f, 0x2}) unshare(0x400) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000240), &(0x7f00000005c0)=0x8) pselect6(0x40, &(0x7f0000f33fc0)={0x20000000003ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a45321, &(0x7f00000007c0)={{0x0, 0x8}, 'port0\x00', 0x21, 0x10, 0x6, 0x6, 0x0, 0x80000001, 0x1ff, 0x0, 0x7, 0xff}) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x3) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc003, &(0x7f0000000140)=0x3f, 0xfff, 0x7) syz_open_dev$sndctrl(&(0x7f0000000500)='/dev/snd/controlC#\x00', 0x200, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000600)={0xffffffff}, 0x117, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r6, 0xff, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x118) 00:44:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x700]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:02 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe803}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xfffffdef}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:02 executing program 2: socket$inet6(0xa, 0x80804, 0x10000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x100002000, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000000)=""/201, 0xc9}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/155, 0x9b}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000003c0)=""/208, 0xd0}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000000600)=""/148, 0x94}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0xa, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xeffdffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x700}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 340.323935] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 340.331367] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x402c5342, &(0x7f00000001c0)) 00:44:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe803000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:03 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x99f8, 0x20200) 00:44:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xf401000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 340.481944] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 340.489352] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:03 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0xff50, &(0x7f0000003940)}, 0x0) 00:44:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x800000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x800000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:03 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x9000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:03 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:03 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) r3 = memfd_create(&(0x7f000049dfec)='/dev/vga_arbiter\x00', 0x40000000000000) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x6, 0x100) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0x10c010, r4, 0xe) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x7fff, 0x9, 0xfff, 0x4}) r6 = getpgid(0xffffffffffffffff) r7 = getuid() getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000780)=0x0) getresuid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) r12 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000009c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@ipv4, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000b00)=0xe8) getresgid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000c00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000c40)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000d40)=0xe8) stat(&(0x7f0000000d80)='.\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000e40)=0x0) lstat(&(0x7f0000000e80)='./file0\x00', &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000f40), &(0x7f0000000f80), &(0x7f0000000fc0)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000033c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000003400)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000003500)=0xe8) r26 = getgid() fcntl$getownex(r2, 0x10, &(0x7f0000003540)={0x0, 0x0}) lstat(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000003640)=[0x0, 0xee01]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003680)={0x0}, &(0x7f00000036c0)=0xc) stat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000037c0)=0x0, &(0x7f0000003800), &(0x7f0000003840)) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000005080)=0x0) stat(&(0x7f00000050c0)='./file0\x00', &(0x7f0000005100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000005180)=[0xffffffffffffffff, 0x0, 0x0, 0x0]) r36 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000058c0)=0x0) fstat(r4, &(0x7f0000005900)={0x0, 0x0, 0x0, 0x0, 0x0}) r39 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000005980)=0x0) r41 = geteuid() getgroups(0x4, &(0x7f00000059c0)=[0xee00, 0xee00, 0xee00, 0xee01]) sendmmsg$unix(r5, &(0x7f0000005cc0)=[{&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000002c0)="d8354ffa75705748fe657a0b738e0d67fdb1ce2c86b56ee9dced16f55945273cd36091360b0d0ef6e249739b0f54b68b0f97c236c9263f6365a520142508f18573463b9d97b45c9228a60e9bb4b0a3d1693294df70f0692cd5f5cd84f261c4b3e6b5b218555dda7e9301655ab507b2a458dd2fac77a647ea996016a937bef137f966175771919b24cfd00cf2be12c3b52547f3829db9bb9accfa3f10541811ee7afcbd9af577f0c5c79ed337110e9232266d4a8cf314014e4f0be28eed7727df3e572b8f7d071fd84410f7cedfe3fdad84f862c745b7f044147bacd51d3a2906249b7d9e5f804c4a0f", 0xe9}, {&(0x7f0000000600)="fdd65332bf242fd5e751fcb3d93bca53e24aebfc7edae287c7abe5f6a509caf6f3f48d25ae2da6c83f35d779064d7ce62df43e5786d35253fa57fa151acccb22765b84564e8fd0ace917b97b4833101e273ef1c7587433b430eaa64029ff4393665c2758a17a947da113accefe5b4cd392a35dd67f4b6bbd4c04d3257ee3317a8358e136df105c2adabc5665334aa47b0ace960f8ae4529419f1204a4ae11733f89468cfebf610a33f645a3172b41dd32f998f8e8392e2fe9df7fdf8f5d3599a67e3", 0xc2}], 0x2, &(0x7f0000001000)=[@cred={0x18, 0x1, 0x2, r6, r7, r8}, @cred={0x18, 0x1, 0x2, r9, r10, r11}, @cred={0x18, 0x1, 0x2, r12, r13, r14}, @cred={0x18, 0x1, 0x2, r15, r16, r17}, @cred={0x18, 0x1, 0x2, r18, r19, r20}, @cred={0x18, 0x1, 0x2, r21, r22, r23}], 0x90}, {&(0x7f00000010c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003380)=[{&(0x7f0000001140)="423231ae3af4c0ec5a19c2b987e03c61f8b627c16f8e612acdeaa1de8cc8a868185299d69d708649550cbdbdca27373afe1bc194d596c3cf77d6c416c23a356d3da3855b55fa5b52f3a7c935f8fe3525b8e8c08c25ccdef2ba80503b74268c3767ffbd471e5529c58e6b6be2489810f2fa33839082823787b3688a88e7a225c7f171a9d02b4ca0e077c69bbff4c834af4f51ca29d6db0551c9e87a8b5d9aa6d00ab5257ea012f1747ce852de96f04e5b55f1e412f0754fcd1652c78aff9e85c50dd52d3fdf1e594000e351f3e86d3cce3ed79f09c3ca8b7142494b044c86783898268415ef3e178e89cc8d6f82", 0xed}, {&(0x7f0000001240)="cfacdaec8ba9ef631380599be57e7c26dd9552d6d77304805a83f38368898059", 0x20}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="95fedf7767de430d9cd9485530f1df728dc5edc9903844c6d57077daf60d111eed8712f5de7594b527f683b1ea182d5553d7f13b9bacc4567b0c44deae00ae8ae14aa104d140b9241fb4152434465a51416770839071c20643d763e9292486775484aa4cead65e01a54ef41bf40cc3dbd622ba0ecf86ca8e3e061be14bb3c8643542a77f517680e619376963090648a684012dab52b3a1ab80e1641407", 0x9d}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="8c368367668d8f4099857e34c7b35499b2e2cc41d7194d34d3619e768e6cb1e7555f86bdb5bd084a7fd98242cbde2008693f42", 0x33}], 0x6, &(0x7f0000003880)=[@rights={0x2c, 0x1, 0x1, [r3, r3, r3, r4, r4, r3, r2, r3]}, @cred={0x18, 0x1, 0x2, r24, r25, r26}, @cred={0x18, 0x1, 0x2, r27, r28, r29}, @cred={0x18, 0x1, 0x2, r30, r31, r32}, @rights={0x24, 0x1, 0x1, [r5, r3, r2, r4, r2, r3]}], 0x98, 0x80}, {&(0x7f0000003940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f00000039c0)="d0ee28dbc66ba20bedaf655763c2284f1d1637f869a6ba29c35d32c3b6273ff1e7", 0x21}, {&(0x7f0000003a00)="4f36c8a6c2fd1858ed9fcd86554e8576d9b5e2411bb90b6d2457943e392e124dafc528945fe614dbb98d44096a4c911053f51b4ab968e1933ffd42ef2dac15175fb2199a591e83629803a370442ecc9cb120cbc0e65b352301992be4f9df68f57a29013eb9d416c6daf496319778816a92af1ab2ffc8eb6bf7714f57f10e40957e4c4af5ecdb9025bbae899f424f537df9f129ce3ee668df0730", 0x9a}, {&(0x7f0000003ac0)="fa4e8cce8e550fd4597cd9c77b99187ae128a0a867ff6e42bfb53c38a8e3740b64ff2b448416cdf73eafb33c1aa157a718c692296487b3abea657487e5cf1288eb2282e53ab8392851958c76dfa440d252913647b3b9b8570fad18af5592f55b8c5cd4424e59c40887d42763e81c6ba54b13f25648", 0x75}, {&(0x7f0000003b40)="50b095d955246fd32b831adcd3c54b410c95cee30fc0154aef3c173e2d05b1acfda7717be538abbbcd6c18367a054b249401d2cc3df7738a79739512a3a6a04c9f198ee536b731b5863c8606e6e9e5f32c5f5ce9a2d4e9ee8b6ab69425fec4a8dac1fc9ff5e7e35dd573909d34d9c438789deedf3e5369681bae386c", 0x7c}, {&(0x7f0000003bc0)="71213bd51132936b28abe0462a2d3c69f2e8d9f7498bca6398a0900da31343d239c7357d5bb9d36c345ca9d66d57c3ae834dd8e553f60f4254e4a5df4755f7cc6dfb8ea7837429770ee9544d57a488850faf37bf073a84436140257d4746038608ba4fefcd9e6b216b3c1192ea2949edcdc566313c011d90eba448f77c60023972a572771d37d8b9a40bcbc26c878e68c0c34f5bab6715244dec28122a483146ca294a9e6955774ffdf36cc02a3f19f37154b8ea56d7d349fad40bea83502fe4ab054d575f048ff3", 0xc8}, {&(0x7f0000003cc0)="7c60f12f62d96e460e9c32e6d3d685b70bd4c2fcdf9bcc270fe66aca0ef9692728b97d0444ea275907c1d5d759832cecc82105a1f029f50ff1e17f821f3c955996c7c450cc3be20c7b5a5874ca960f98f00f13c7df5c35b3cf342c6d8d648f7d9a6f76998d6cd478810a942294c80366f32157d7ea73c9354ca1d0beed8091abd5b31fdcd3431663e86937a82fd701ae2ba3a0d49d79afdeee1e27e642b5c3d63a740a16d45895dd13ccc894190439e51d3a", 0xb2}, {&(0x7f0000003d80)="90495c0f851b6e75a90005f7094822c1e4180669e4222b5a517a114c24925595eb161c6caeb4cf334ce437d6d74a940f83e97ff37ae02ae0341b8fcf45fef772f2d2acc9646603062c653e566067bfc59e89a9b38c217fc2edab5ec4fe8f5347773556bff7a375870b42aab03b25b195c22bddd9bdddc97a8a244359643ff8aa0af6972400793dbb0f053ef959e15880a63b", 0x92}], 0x7, 0x0, 0x0, 0x40000}, {&(0x7f0000003e80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003f00)="8225093f8f2bfc4c95d57615f9b0c55061132b1ece4276531ae851039c975215af397da989097826d9d984bf8cb1aeab41d33a800f1157e9ad5a0e20a8a545645138f99ccb145883e1f456d1dd3e906289d538aaf24ada5653e3de874ee90d1fca5b6e869c014e61e2bb8b91f641149634f5d8117db7fde5aad6509d1a8d52139511679754d16064", 0x88}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="cba55c1e36377b3f4454d760d2dfe4dd5f6a23052085318db23db2b6ebb119a579923939023a65524a78", 0x2a}], 0x4, &(0x7f00000051c0)=[@rights={0x24, 0x1, 0x1, [r2, r5, r3, r2, r3, r0]}, @rights={0x10, 0x1, 0x1, [r0]}, @rights={0x1c, 0x1, 0x1, [r3, r5, r3, r5]}, @cred={0x18, 0x1, 0x2, r33, r34, r35}, @rights={0x24, 0x1, 0x1, [r36, r0, r5, r2, r4, r2]}, @rights={0x18, 0x1, 0x1, [r0, r0, r4]}, @rights={0x14, 0x1, 0x1, [r4, r4]}, @rights={0x10, 0x1, 0x1, [r0]}], 0xc8, 0x4000}, {&(0x7f00000052c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005340)="49a2a41dd2ce37dfe6bd242330ab55ed5b6574dbd2f6a3e58178da6ac02dc3dfc64eda7fad60e79bc7f6e2d5f57affbaad0e19b73a94fc573dd66131cb92d296d5b94a9e1e4134859c3e09964c17837298daa08335", 0x55}, {&(0x7f00000053c0)="f0c34f19e88fe16e73ec45e1a9c454fb944f69085d2ac0576b2665bfd7fc248d7a63b7297a12d19930eff99990f1badfe932d08c", 0x34}, {&(0x7f0000005400)="3466ba1de459a24fe16465898511d9e4d4b9d1e1e3f3f8f6e403ce8786b92060cbea553ace40b1b8fe4a1a8cf4da0a429fe9c6398d8e667be02dd603aa0eb986e2368d6c90a4f4a0e35c94d50694ac35a7576ca6793bf2b0e61518430614961eae66c9772d4a9d03a75cb545e006c50a36baf37876e16d10e6ec4068ff8a70055a56d4ba15b049d866f03ea6394477d864d87eb33fceb5a665a62be2c5ec64a2b4bbe42f31d643881a12595f364899ff76c4b1b9f284f2b1301a8ca3085067dfdff510c64411eb5cd802ad3a1275ce4ecbe3dd5213bbce0f774932e7d99fa7eaf42a59", 0xe3}, {&(0x7f0000005500)="7350a1fc898ecd59f4653e6135cbb148ee1184a43254aac4626a3e315e13c82a531fa81b8585455006c3d82279bb917db639872c40ce898ea5970b", 0x3b}, {&(0x7f0000005540)="f68498cfa5119b5d9507c088f385b21662df6fb08a8cb3ccfce783b87be72656f936e9c2a1f9b71aa08ddc96af457be3e1e0813e47f9d1b3beb46ba856d2d1e14769cf1164cba78cdea5244efbd0050f8c34be876eff00b2f8622c0b0fda12736895648681a50d314831675b9bbf6290153ae0a1beef6ef4b90de7503388c66671aaadbc5a142f", 0x87}], 0x5, 0x0, 0x0, 0x20000010}, {&(0x7f0000005640)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000005880)=[{&(0x7f00000056c0)="413a0e0abbb270b04892b49998c91b720caaab2b353eb26b62e4ba93b8e86b5e36a67aa4b93e42c7ee8dc5b25ccaabc14360d5aed4f1a777bb21b188985084af2fe9e03d1ce3d9ca0028a580fc6f2b0cf62dfc11c833cc13c87260dda022c34ee653db5c9512953201eb80bc1d041ea277347879e4743b654193fa0d2fadff0f", 0x80}, {&(0x7f0000005740)="b4dd1e3dc89e46adaf192e2fb310fecb4d805745f3cf79b35cd9a04d70193879e3ab3500c53a248d295d373c44c6448c2b8ba2c32b5dc70748cf7513645f44afc7ba5b4a5b74703f6c491a3eec3c364eafc3d8adf624ca0261d2e335f33f20e27ef6effda5dfd542a24b02cac0a29486dae0320ceae5a06c412a47524d26a793608e8a1f55513514dd0988efa655454c71c8fd3428511d5979a1d900c8a5e3110501ffef5363b43a4aabd25f22afd60e0a53", 0xb2}, {&(0x7f0000005800)="7e117c94f26bde3e909726e615909204227dbb443bc4e1f886cd492e5fa4efd6d55ebdb159bf0da0777c73d50df1218e78ddff244b628bda34391d351ebe3ae72550001163c9ef05debe4a6229a2d281b0aeb5e390839bfd07f3755c14e9a9d085b7afcb52e16ed8f4157a3c", 0x6c}], 0x3, &(0x7f0000005a00)=[@cred={0x18, 0x1, 0x2, r37, r38, r39}, @rights={0x14, 0x1, 0x1, [r2, r0]}, @cred={0x18, 0x1, 0x2, r40, r41, r42}], 0x44}, {&(0x7f0000005a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005b00)="227799701abededdbf35158f02eb1cb2651f5ee5319398afd3c266aaea0a672441a27395173ad0f522a4a93f65e04673e35ed470c4cd1a3a6c91c401b1ef4f054a4ea7bdb99a9c34b36818e58a3078c80757391b5660861df1714bf188291284271e004230d3fadbc1b9b8044bf6396adf97d9d8fd7daf14dec6c3bf949ac6211e1f11fe937af96bd0666b29d420ad37dc559931cc829b86df544c4e", 0x9c}, {&(0x7f0000005bc0)="e4ea43774dc5df603338ba4fff6f04213584cab86d326efcf97f68f367d76e4a63431ed5cae226bc8b9d8efde6d254648df29f07a7801be6d900b9ae152068f912c070069ecb4ab1de106c229c5ac9e3894903d21194629e09a270502b4a914e7d7af523f1f97f53f9a303923a89e16c4cbb4be932f5ba76334e1c2b7f2fceee27520014e3379227b763b135954adfdd4a8807c0996392bd19", 0x99}], 0x2, 0x0, 0x0, 0x20000800}], 0x7, 0x4000080) unshare(0x400) fdatasync(r3) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000001c0)) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe0000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x14000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:03 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7233, 0x88d40) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:03 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xf401}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 341.508531] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 341.516077] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40505330, &(0x7f00000001c0)) 00:44:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1f4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:04 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) unshare(0x40000000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x4e20}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0x2f0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[]}, 0x1}, 0x1) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x5) r3 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x1, 0x4, 0x0, 0x10000, 0x0, 0x7, 0x10, 0x1, 0x4, 0xa0c, 0xf58, 0x100000000, 0x9, 0x3, 0x7, 0xfffffffffffffff7, 0x9, 0x400, 0x3, 0xfff, 0x8, 0xc00000, 0x3f, 0x1, 0x7ff, 0x0, 0x4, 0xfffffffffffffb55, 0x55, 0x1, 0x9, 0x3, 0x1, 0x5, 0x1, 0x2, 0x0, 0x9b4, 0x2, @perf_config_ext={0xff, 0xff}, 0x10080, 0x8001, 0x2, 0x0, 0x5, 0x8, 0x2}, r4, 0x5, r3, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0x0, 0x8}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xa909, 0x400300) sendfile64(r0, r3, &(0x7f00000001c0), 0x9) 00:44:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xf401}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 341.622733] IPVS: ftp: loaded support on port[0] = 21 00:44:04 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0xffffffffffffff50, &(0x7f0000003940)}, 0x0) [ 341.667144] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 341.674673] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x4000000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:04 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:04 executing program 6: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/82, &(0x7f00000000c0)=0x52) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r2, 0x8, 0x10}, 0xc) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x404c534a, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'gre0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) 00:44:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x700000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 341.823223] IPVS: ftp: loaded support on port[0] = 21 00:44:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:04 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:04 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) fsetxattr(r0, &(0x7f0000000000)=@random={'osx.', '\x00'}, &(0x7f0000000040)='\\ppp0*0.{%\x00', 0xb, 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x100010, r0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 342.589377] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 342.596820] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc05c5340, &(0x7f00000001c0)) 00:44:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x14000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:05 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000040)={0x0, 0x7ff, 0x3ff, &(0x7f0000000000)=0x6}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:05 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xffffff7f}, 0x0) [ 342.721308] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 342.728802] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x8000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8c000020}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:05 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xfdffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xeffdffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:05 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) 00:44:05 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000001c0)=0x3f, &(0x7f0000000200)=0x2) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1f, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000080)={r2, 0x5, 0x200, 0x3ae2}, &(0x7f00000000c0)=0x10) unshare(0x800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r3, 0x10000, 0x0, 0x2, 0x76c}, &(0x7f0000000180)=0x18) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="66b9f20200000f32bad10466ed66a5d9eb3e640f32af67260f01ca648086f17f4fba610066ed66b97900000066b8a63e000066ba000000000f30", 0x3a}], 0x1, 0x11, &(0x7f0000000300)=[@flags={0x3, 0x8080}], 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x40000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:05 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffff7f}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xc0ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:06 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) r1 = getpgrp(0xffffffffffffffff) sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@hyper}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 343.716325] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 343.723716] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x408c5333, &(0x7f00000001c0)) 00:44:06 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x7}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:06 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) linkat(r1, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x1000) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:06 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xf00000000000000}, 0x0) 00:44:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) [ 343.883872] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 343.891374] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x14}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:07 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x2000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffffc0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:07 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffe) read(r0, &(0x7f00000002c0)=""/140, 0x45c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f0000000000)={0xffffffffe7058271}) 00:44:07 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x5}}, 0x6, 0x6, 0x40, 0x6, 0xffff}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x0, 0x1, [0x200]}, &(0x7f00000001c0)=0xa) r2 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000200)={{0x88, @multicast2=0xe0000002, 0x4e21, 0x4, 'fo\x00', 0x8, 0x6, 0x13}, {@broadcast=0xffffffff, 0x4e22, 0x10000, 0x80000001, 0x4, 0x1f}}, 0x44) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:07 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x7}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xfffffdef}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xc0ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:07 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x16000, 0x104000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0x100000}) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @tick, 0x7, {}, 0x2, 0x0, 0xfff}) r2 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000100)={0x157a, 0x6e, 0x81, 'queue1\x00', 0x7fb7}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000003c0)=0x4020, 0x4) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000380)='lo\x00') 00:44:07 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) sendmsg$alg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000140)=[@assoc={0x10, 0x117, 0x4, 0x6}, @iv={0xbc, 0x117, 0x2, 0xac, "dc7dcf6dc95fded7efa9c6af2ab83f75980ea9d86e1a4e71d7134de792dccf5604ddba82893ac2cd2861bc2c39b647090b04d1fa7bc39a7bb31654a59f3713eaf22621acbdd2dd79b5db18a725bc91e286b0500406fa72bccf952cb8089e5b806db47b64ff561c167ff5956bac01214d64a9fbafedf758bf3a21dae1dd963d4ab2505ae234c2597ec5507248ef9274af0cfa9d23faafbf55e1d77d03562b37f8b72e1c64c6e605195cc359e1"}, @assoc={0x10, 0x117, 0x4, 0x4}], 0xdc, 0x20000001}, 0x4000800) [ 344.933559] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 344.940954] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x402c5828, &(0x7f00000001c0)) 00:44:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x2000008c}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:08 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), 0x4) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x40000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:08 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x100000000000000}, 0x0) [ 345.087605] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 345.094973] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:08 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x200000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe000000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:08 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x100) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000040)={0x3ffffd, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000768000)={0x0, 0x3}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x4000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:08 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1400}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:08 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x73, @broadcast=0xffffffff, 0x4e24, 0x0, 'dh\x00', 0x11, 0x10000, 0x6d}, {@broadcast=0xffffffff, 0x0, 0x10004, 0x80, 0x5cf8, 0x7}}, 0x44) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000240)="b330d3e4b54ed30255c144c8e563e57eaf03679f1eeffdd849283c8dc70ef8922643") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000000580)={{0x1000, 0xf17}, 'port1\x00', 0x24, 0x100028, 0xc50, 0x8001, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5}) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x2) write$tun(r1, &(0x7f0000000480)={@void, @void, @arp=@generic={0x32d, 0xe117, 0x6, 0x4, 0x3, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}, "557fa99c", @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x15}, "c7c63dcef9a8907db6d96886b859e63d"}}, 0x28) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/42, 0x2a}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000380)=""/216, 0xd8}], 0x3, 0x2e) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 346.031211] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 346.038672] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40a85321, &(0x7f00000001c0)) 00:44:09 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x40000000) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffff97}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffffc0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x4000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:09 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x1100000000000000}, 0x0) 00:44:09 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 346.202513] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 346.209950] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 346.235460] IPVS: ftp: loaded support on port[0] = 21 00:44:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x900000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8c00002000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x97ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 346.387989] IPVS: ftp: loaded support on port[0] = 21 00:44:09 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x2000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:09 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x7, 0x0, 0x1}) 00:44:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xf401000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 347.111882] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 347.119273] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x40505331, &(0x7f00000001c0)) 00:44:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:10 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x40004) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xebff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x7]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:10 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xa000000}, 0x0) [ 347.277001] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 347.284485] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:10 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffff97}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xc0ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:10 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r2 = geteuid() setreuid(r1, r2) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) setsockopt$inet_tcp_buf(r3, 0x6, 0x16, &(0x7f0000000040)="4dbdc3b785eb50bb1b7a68a8eb340dd15907f8d6a4c098d37458bf1ab53ba992bcc2f30dfe7318476c1dc26075e3abd2cb051686c8bd49217138ad12477e180f6c540b233a9ff65deabcd5c43b98c0e2807748f216a515d8c456f0d5b2579cff0ecae1ad", 0x64) prctl$void(0xe) 00:44:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x2}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:10 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x4000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:10 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\'Pvmnet0^lo-+\\wlan0\x00', 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0xa3, 0x5}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x338a}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0xffffffffffff8001, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x78) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r0}) unshare(0x400) ioctl$TIOCEXCL(r1, 0x540c) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:10 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20440, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000040)=""/60) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @tick, 0x1, {0x4000000000000000}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 348.251796] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 348.259203] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 348.422801] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 348.430171] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x800000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe0000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0505350, &(0x7f00000001c0)) 00:44:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0xbf]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:11 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) timerfd_create(0x5, 0x800) dup(r0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000200)=""/4096) r1 = memfd_create(&(0x7f0000000040)='\'Pvmnet0^lo-+\\wlan0\x00', 0x2) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) timerfd_gettime(r1, &(0x7f00000001c0)) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x80000000000002}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:11 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x11000000}, 0x0) 00:44:11 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) [ 348.509072] Unknown ioctl -2143271647 00:44:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x2000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xc0ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="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", 0x2bc, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x3c4, 0x20c, 0x0, 0xffffffff, 0x328, 0x0, 0x414, 0x414, 0xffffffff, 0x414, 0x414, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x0, @local={0xac, 0x14, 0x14, 0xaa}, @multicast2=0xe0000002, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xcc}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @port, @icmp_id}}}}, {{@ip={@empty, @loopback=0x7f000001, 0x0, 0x0, 'syz_tun\x00', 'eql\x00'}, 0x0, 0x98, 0xcc}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @empty, @loopback=0x7f000001, @gre_key, @icmp_id}}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1400}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 348.689854] Unknown ioctl -2143271647 00:44:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xfffffffffffffffd, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) prctl$getname(0x10, &(0x7f0000000040)=""/202) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:11 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000a80)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r2, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@in={0x2, 0x4e21}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="7901c378961959a3ff22b2e7dde909b8c4aae4e15a8ea3f73d2c532a76ee84b9c867266f7a4bc05542d01bf44d72585f711090f4a4607968b00c194add1cc0d049de4bca51d4e13c71aa97c2bae2538bc66d212da95a2aefe1abce5d9e0474c4e62d5480b02f730e6cf61465df090a7e9b09733a3e26e31ccf192f", 0x7b}, {&(0x7f0000000100)="2ee6ef0aaf57fe4be7fce711f0aa0e58f3e70b68eb48f9f970ebd132719691ade273b536a418329f712c00375def0931637732ac40d84eaf4c526136c09e5fdfd4fc7407916123aefda6daada60cea20ab13aa469a8174b5402372c725ad660fffffe665412e57a6c8577751566a4de5e2e1719a0cd12899c7505afbf513a5294f635560a62c0fb1617d31a25814485772968bd9342ceca122f1e77b493b3de7f7b946", 0xa3}, {&(0x7f0000000380)="a4ce535fcb91e7d656e6d19ed79a9a5767e404511e0fa3254a146761ba321480a133097b4d27797d728e93f0471639a7df22e419a88eee19f80aa13d20feac52cea42b6c97636eb726fb21afceeab6974f08b18313295c3ff9692724d2f0e18187223da6c6010cccf1787cdfbcadfe02417d42cdfdb90f4619c3f6e8519d2d6fc961806b1bbf11d427f0863f4755da422938d87e278ba65d4b1ddd0be9d5efcb986eaf04cbfbfe344b000995d83de445b61dea743b74d3553689a1f9139963a081bfb7d5f6c454ba7f5dfade8369f582123cad8a4b4b61d9da7cd452a10a0816a13a7cf4fbe5d8d9f96517", 0xeb}], 0x3, &(0x7f0000000580)=[{0x88, 0x11b, 0x7, "ffd4bb1489329b633b99a7706572b0867c1a92cb130c9e1cac3d5de1abdd7f248eb581d2171f93618d1812ce9775f939c715213b1d55ee43f67dd9a7583540764d526bc118fd1f763c3dbda7b0a001d6f4aaf5e5a991332933ce63d490c2e19deaa6699652dc06ca5471d956f9783446dc8083440171752c83b6"}], 0x88, 0x40}, 0x4b0c}, {{&(0x7f0000000640)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000480)=[{&(0x7f00000006c0)="e032c5f4fb042e832fc3d9674c8c9381bbc32b27e88984de6205d79592219b142d87ee2eef85e2ec3b440105e65c4c657d648f7c88057c85ac997a2fa2a72836eb4b2c3f6d93ba0d0eb4b2aeda8b82a950e20bdf4b854d4ae1645187ce5531a57638d83913fa8b561b6928", 0x6b}], 0x1, &(0x7f0000000740)=[{0xbc, 0x112, 0xfff, "0ba751a35f0b6f9612d9bf857c00f80c416445e404b5ae38152a64066f261cdee8472d29de720dc4aa1a22882b6a81e24a65a0a474af7b006c7e97e9e3de45f545eac0982e2438f1ebdee8ceadf182d14e5f8688ff5f4aabe7a8b33cc24104eeb9c00a1b72817c7c438d9ba896b297c4a2a57fa8d0de88f480b3abbfdc53e9ac6b6cb1acfab2f8885cb1aa10c749206bd9f3c8df530ecab491db5474c2e6bac5d338755d7b76e9d37a25ea4ff9d86a"}, {0xac, 0x10b, 0x200, "83e52db986cf02a06b937e415b77ce2533eb4f0e19e64b61b8fd5ddbd26c87c36efc37478d30d56531e0f46ebf17c9207418e350135653c95365f076416e1250ded00c39539d1f415cf49b3b70a339ace2a330ca5f2799246029156fd39e09e5f67a1f7d11d02f4f17871392feb7a7792f328023c32124c44ae6bd0f31a90cf025c75d318b4e953255618ae77e6ba4f8677891a8265a409e89aba1725a"}, {0x34, 0x11b, 0x5, "2a0b3668bd945823811b4e232e4018f1757d54b0cad2d0ecb3e69cfc827836bd34f701fd2b9e6ce7"}, {0x98, 0x29, 0x6, "32a55506adf2b19f02279643289f8c962fc6fadd593897cb9d8ce736d1706107c1016bd33dd9dc7b9308fa8cd2a25380d63c407ef028ccb1c10baad87103129d51e8a5ebe6308287c2cac44148cc983022cfce71b5479ec011afd9bc69e7eda31f95a8a04dffd71ebae5a577eede81eddfa531f3f53d19140e3e3af96ca6d9592ab8f9a9b5328f3caa"}, {0xbc, 0x103, 0x1, "4132c3f3052ed12bec5bb2f9676a1f724a3cf4c41096d1aa92765569c11f964944a397464030861658d734960730340d91eba7a77220e24c8666b0359b8561f8d604588645f3b54e107a941920538f11a68ed973416aaf442c953b05c20b9806801b4cb51a51548a10abfe78a23ccce0e4dc7193b1d18d7ad713a2934e7672005346897e4111268b26f68ed38634496b883be147f257d6b8fe68b24db4eea369971d6a027c81fa3bd8d814c72307"}], 0x2f0, 0x1}, 0x6}], 0x2, 0x4004) pipe(&(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000002080)=0x9, 0x4) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x97ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xf4010000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:11 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1, 0x30}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x43}, &(0x7f00000000c0)=0x8) readahead(r0, 0x3, 0x2) [ 349.313007] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 349.320436] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 349.468702] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 349.476084] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5336, &(0x7f00000001c0)) 00:44:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffff7f00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:12 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'raw\x00', 0x2, [{}, {}]}, 0x48) sendfile(r1, r1, &(0x7f0000000040), 0x1) 00:44:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0xbf00000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:12 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x200000000000000}, 0x0) 00:44:12 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xfdffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x1f4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xebff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:12 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x527) 00:44:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x100000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xebff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:12 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2210000000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000140)={0x7fff, 0x100000001, 0x1, 0xdcc, 0x1ff, 0x5, 0x7f, 0xfffffffffffffffe, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={r1, @in={{0x2, 0x4e20}}}, 0x84) r2 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002600006bb10da760a92800000000000000000003000000"], 0x14}, 0x1}, 0x0) read(r2, &(0x7f0000000000)=""/140, 0x8c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0x404c534a, &(0x7f00000001c0)) 00:44:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x4000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:12 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x7) 00:44:12 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe803000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 350.496498] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 350.503973] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 350.653109] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 350.660602] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x5421, &(0x7f00000001c0)) 00:44:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe000000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:13 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f0000000040)="2353258938c7bcf09a772750766d6e6574305e6cb54aa4864a53c82f14f30e8c1ddaef5b17bf42328b985d01a389f849ddfd7867a498afb7bc38a36a06a229bfeb1e8ab4fb1c42bf82913a02a513ff3dbde136fe7aa763c43f663c88f191c8279f4f2ab22e", 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfffffffffffffbfb, 0x0) unshare(0x20000200) getdents(r0, &(0x7f0000000140)=""/178, 0xb2) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x10, r0, 0x180000000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) kcmp(r2, r3, 0x4, r0, r1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0xbf00]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:13 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xa00000000000000}, 0x0) 00:44:13 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xe0ffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xfffffdef}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xe8030000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:13 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/user\x00') 00:44:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xebff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:13 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x4000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\x00', 0x2000) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x1, 0xbe6c, 0x81, 0x0, 0x8, 0x401}, 0x5}, 0xa) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7403000011082e0025bd7000fbdbdf25000000006c002b000800900000000000ebf876aae49cfe1a0df98d2636ad70eaf65c8f0f60ca31c9b677034dd276d6b291ac094f5f7385842041834f38d6b00d99ad9d3004647a14d3071c84b8a396dcf1572e48b84c88b094d001b741b017d2968a4c023afd277708006c007a6e795dd13162eceadbe2227658983718eb5d92000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x374}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000805) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000580)=0xffffffff, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='veth1_to_bridge\x00') 00:44:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x2}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:14 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x28800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {0xc}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1e, 0x3}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x1}}]}]}, 0x54}, 0x1}, 0x0) 00:44:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xebff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 351.629713] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 351.637132] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 351.783651] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 351.791173] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc058534b, &(0x7f00000001c0)) 00:44:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffff7f00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe803000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x2000000) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x700000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:14 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xffffff7f00000000}, 0x0) 00:44:14 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xebff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x9000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:14 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, &(0x7f0000000080)=""/222) unshare(0x400) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x2e, 0xff, &(0x7f0000000080)=0x100000001}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140)={0x8, 0x7, 0xfffffffffffffffc, 0x3}, 0x8) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:14 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffeb}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:15 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)) 00:44:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x40000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:15 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3f, 0x2002) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0x404c534a, &(0x7f00000001c0)) 00:44:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x7000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 352.742563] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 352.750063] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 352.895734] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 352.903161] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0xfffffdfd}) 00:44:15 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe8030000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:15 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x10000000000000, 0x4) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x3e8}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0xfdfdffff00000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:15 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x1100}, 0x0) 00:44:15 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xf]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1400}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xffffff7f}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:16 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) sched_getaffinity(r0, 0x8, &(0x7f00000004c0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x20000000, 0x0) r2 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000040)) r3 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x10501, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000140)=""/226, 0xe2}, &(0x7f00000000c0), 0xa}, 0x20) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4004ae52, &(0x7f0000000080)=0x40) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000380)={r4, 0x6be12967}, &(0x7f00000003c0)=0x8) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000000)={0x0, @empty, 0x4e23, 0x4, 'sed\x00', 0x0, 0x4, 0x28}, 0x2c) 00:44:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x9}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:16 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa01, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000008, 0x4) unshare(0x400) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x4000, &(0x7f00000000c0), 0x2, r2, 0x2}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x101040) 00:44:16 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xebff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xeffdffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:16 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000280)=""/179, 0x3e1}, &(0x7f00000004c0), 0x12}, 0x7) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000003c0)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) sysinfo(&(0x7f0000000a40)=""/225) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d00000000000000000000000000a1990000000000000000", @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00,\x00\x00\x00\x00\x00\x00\x00', @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00A\x00\x00\x00\x00\x00\x00\x00', @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00p\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00', @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000001100000000000000", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340), 0x1872c438a0503004) [ 353.882280] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 353.889689] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 354.037134] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 354.044531] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x1f00000000000000}) 00:44:17 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x2}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8c00002000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast1, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='rose0\x00') memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x280, 0x0) unshare(0x400) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5) pselect6(0x40, &(0x7f0000f33fc0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x55, 0x3}, &(0x7f0000768000)={0x0, 0x0, 0x1, 0x1ff, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000086000)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000004}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000280)='ip_vti0\x00') 00:44:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x7000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:17 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xf00}, 0x0) 00:44:17 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x2000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x8c000020}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:17 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:17 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) finit_module(r1, &(0x7f0000000140)='!&\x00', 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) unshare(0x400) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000000c0)=0x5, 0x4) ioctl$TCFLSH(r0, 0x540b, 0x1) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x900}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x8000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0xa00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xf401}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 355.049112] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 355.056577] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 355.205347] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 355.212747] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0xfdfdffff00000000}) 00:44:18 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x7fffffff, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x84) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) 00:44:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xf401000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x8]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:18 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x2}, 0x0) 00:44:18 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x20000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:18 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000380)=[{0x9, 0x2, 0x8001, 0x6, @time={r1, r2+10000000}, {0x8, 0x5}, {0x7f, 0x100}, @addr={0x4, 0x10000}}, {0x143b, 0x5, 0x6, 0x2, @time, {0x101, 0x33}, {0x3, 0x200}, @raw8={"ed05324ab220f5f1b864793b"}}, {0x4cf, 0x100000000, 0xfffffffffffffffb, 0x3, @time={0x0, 0x989680}, {0x9}, {0x8001, 0xfffffffffffffffb}, @connect={{0x22, 0x7ab}, {0x7fff, 0x6}}}, {0x5, 0xc10, 0x40, 0x934e, @tick=0x1, {0x5, 0x8}, {0x80000000, 0x4}, @raw32={[0x6, 0x0, 0x1]}}, {0x1, 0xfffffffffffffff8, 0x1f, 0x3ff, @time, {0x7ff, 0x1}, {0x100000000, 0x3}, @ext={0xb5, &(0x7f0000000140)="daa25d761666130afcc9bc99d0ae7e0a4b310edd89f1765cf489118d281544f5432c97bb65748bf854112a798ff6234cd55bd55d31fe0d843a9e49bac36f450716ec9e4a34b193325687ad0d70a31acc3bc90080ca491c700c17ddab2e01c870cfb16cf4892f0acacfed020ac9de2a198b398e22df4f5cfdedc01658a108fb0ea63a3bc1150605863987c0f38e44acd7190a2c1234c7e385035e40708b60ef31d0a78342102b55b066715fcccc62781e1dd0f4e875"}}], 0x8c) timer_create(0x1, &(0x7f0000000240)={0x0, 0x3b, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000480)=0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r6, 0x0, 0x6e, 0x1000, &(0x7f0000000640)="c91c6710eaff33a72f4bce257025cc763f93a67be64cab6adefeab41350faf9027b562ae58f6ba9f15f831457f79037bf417a5eac66ecf2763646834ec4f25c7fe333c40e75b45fa1793af3fa9982aca91d95aa76e1b63d24d4cd56d988534750187213a7565401e2b5692a90be3", &(0x7f0000000700)=""/4096, 0x4d81}, 0x28) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000600)={{r4, r5+30000000}, {r7, r8+30000000}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x3}) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rfkill\x00', 0x101400, 0x0) ioctl$VHOST_SET_LOG_BASE(r9, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) mkdirat$cgroup(r9, &(0x7f00000006c0)="21d7c9e1ff", 0x1ff) 00:44:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000000)={0x80000, 0x0, [0x8, 0xfffffffffffff547, 0x1, 0x2, 0x200, 0xfffffffffffffffb, 0xffffffffffffff69, 0x400]}) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe803}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x900}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x700}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:18 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)="2750766d6e6574305e6c6f2d2b5c776c616e30001b5f589ab4cb84b81ec32fa2cac9d07ab6ae1fa86a5825ef71577a7257ea74d22379e7e98d68aaa3a74e7edf71d6109a11bf7a15b52196982278581190b5db17cc", 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) openat$cgroup_int(r0, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000140)) [ 356.195422] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 356.202847] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 356.349273] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 356.356719] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x1f000000}) 00:44:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x7}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:19 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffe}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x6e}, &(0x7f0000086000)={0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000f14000)={&(0x7f0000a65ff8)={0x2d}, 0x8}) 00:44:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:19 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x11}, 0x0) 00:44:19 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:19 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x3d8cb47d95373def, @tick, 0x0, {}, 0x3, 0xfffffffffffffffd}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xeffdffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:19 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x1ff, @loopback={0x0, 0x1}, 0x4e9}, {0xa, 0x4e22, 0x3, @empty, 0x5ee}, r1, 0x9}}, 0x48) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xc0ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xc0ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:19 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xf4010000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:19 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) socket$pppoe(0x18, 0x1, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:19 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xf4010000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 357.344768] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 357.352150] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 357.497532] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 357.505046] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0xfdfdffff}) 00:44:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffffffc0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xebff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) unshare(0x400) fcntl$setstatus(r0, 0x4, 0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40c200, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x82040, 0x0) 00:44:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x700000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:20 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x1000000}, 0x0) 00:44:20 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:20 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080, 0x101}, 'port0\x00', 0x80000000000003f, 0xffffffffffffffff, 0x22b}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f0000000000)) 00:44:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x97ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x200000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x8c000020}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/vga_arbiter\x00', 0x3) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) 00:44:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xc0ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x200000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:20 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0xe000, r1, r2, 0x80000000, 0x6, 0xa0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) [ 358.514528] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 358.521986] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 358.673250] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 358.680776] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x1f00}) 00:44:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x7000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x7000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:21 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1f, 0x84) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:21 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x2000000}, 0x0) 00:44:21 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:21 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000002c0)={{0x4, 0x1}, 'port0\x00', 0x9, 0x120000, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x8}) read(r0, &(0x7f0000000040)=""/140, 0x8c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f0000000140)={{0xffffffffffffffff, 0x3, 0xfffffffffffff01b, 0x0, 0x7}, 0xffff, 0x6, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}) 00:44:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe8030000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:21 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x737, 0x8002) accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80800) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x4, 0x2, 0x3, 0xe, 0xffffffff, 0x0, 0x8}, &(0x7f00000001c0)=0x20) r3 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x2000000) mkdirat$cgroup(r1, &(0x7f0000000280)='syz1\x00', 0x1ff) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000200)) accept4$alg(r2, 0x0, 0x0, 0x800) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000240), 0x2) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) rmdir(&(0x7f00000002c0)='./file0\x00') ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) 00:44:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffffff97}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x2000008c}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:21 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)="00000000001000") fstat(r1, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) 00:44:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xf401000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 359.638415] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 359.645871] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 359.791608] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 359.799081] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x1f00000000000000}) 00:44:22 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x10000, 0x7, 0x8, 0x5, 0x4, 0x3, 0xe0, 0x8001, 0x0}, &(0x7f0000000040)=0x20) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/67) r3 = getpgid(0x0) ptrace$pokeuser(0x6, r3, 0xff, 0x4053) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000001c0)={0xc1d, 0x6, 0x8, 0x0, 0x7fff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x9c}, &(0x7f00000000c0)=0x8) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe000000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xeffdffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:22 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xf000000}, 0x0) 00:44:22 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:22 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:22 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x100000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x4000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:23 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), &(0x7f00000000c0)=0x8) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000200)=0x4) r1 = gettid() sched_getattr(r1, &(0x7f0000000140), 0x30, 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x900000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:23 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1, 0x40000000000) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x14000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:23 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x2000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 360.797179] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 360.804657] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 360.952634] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 360.960086] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0xfdfdffff00000000}) 00:44:24 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080), 0x14) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/51, &(0x7f0000000040)=0x33) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0xfffbfffffffffffb) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x9}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:24 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xa00}, 0x0) 00:44:24 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:24 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$getflags(r1, 0x40a) r2 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0x404c534a, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 00:44:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x97ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:24 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) modify_ldt$write2(0x11, &(0x7f0000000000)={0x101, 0x100000, 0x2000, 0x5, 0xf8c0, 0x6, 0x18e, 0x9, 0x0, 0x80000000000}, 0x10) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x8c00002000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffffff7f}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa00000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:24 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb94a, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x700}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 361.938962] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 361.946402] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 362.093860] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 362.101315] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x1f000000}) 00:44:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe0000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:25 executing program 2: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0xffffffffffffff9c, 0x3, 0x1, 0xf8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$int_out(r0, 0x5460, &(0x7f00000001c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x244, @tick=0x1, 0x800, {0x632, 0x4}, 0x5, 0x3, 0x4}) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000000040), 0x8}) 00:44:25 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0xc, 0x2, 0x80, 0x1}) 00:44:25 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xf}, 0x0) 00:44:25 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0xbf]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffeb}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:25 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x9, 0x68d9, 0x1}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffffffc0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x8}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) socket$rds(0x15, 0x5, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 00:44:25 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x800000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x9}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 363.102573] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 363.110088] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 363.256812] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 363.264215] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0xfdfdffff}) 00:44:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x73, "fb6214a6c1d7b78d8af0689486a79b767988a6f871fcb11ff0b28367fa15673c287768fef04cb30c88ecd6d180b11f1df62bd0c220b1cf83e0b11b4c50688a5d724a9e23601766c962bf483316c09cc30edf4d0af725f79ec4ed73a61054f7d1ba4e0dc0ac9b768bf61057f71ce74eae9973a5"}, &(0x7f0000000080)=0x7b) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0xa8, "e9f9eb23a7ba93040ce380edae82d846133ffc2cc261b5ff124f78d9dc2767ce5d6fc959fa0a64a4c85bee25f9095d70170ec4308a5522c2f0f258fd4f9f7acc2449382b1d82b537f7e7ec179a4ab0aae5a3ace60d8b99a2989359349fbc8cc70dff784806f799058a33da1f59a9b8589d6be8885094ff1854feeff4c31fbfecae241f730ce5d807ea30780e5e84fee3a536331d146b38165ad64bdf708df1d5f9d4a19733ff8468"}, &(0x7f00000000c0)=0xb0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x9000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x9000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x800000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:26 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0xa}, 0x0) 00:44:26 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:26 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=r2) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def, @tick, 0x0, {}, 0x0, 0x0, 0x20000000000}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_bt(r3, 0xdd17, &(0x7f0000000380)="95c750d60216c3a45d13706deb9861e32a628f9f93e4bb3faaa0899864218a1fbc7477eb6bef527b9067c4d6cec644592aa4ed954edecfcf85d597939be23fa8cc51747626464f95058b1d1e90ae321ff3669870b274280598c443127b886739b185b620e14e3dc7dc7a04cb585525e82e3119") ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1f4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1400}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:26 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000140)=""/182) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}, {r1, r2/1000+10000}}) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x2}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x3e8}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:26 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) accept4$packet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000500)=0x14, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x48000040}, 0xc, &(0x7f0000001300)={&(0x7f0000000540)=@newtclass={0xdb4, 0x28, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, r2, {0x5, 0x4}, {0xfff2, 0xb}, {0xfffe, 0xf}}, [@tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x408, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x7, 0x401, 0x4, 0x733, 0x80000001, 0x2e3, 0x3, 0x9, 0x7, 0xfffffffffffff9c7, 0x4e, 0x1, 0x9b6, 0x0, 0x5, 0x6, 0x81, 0x4, 0x100000000, 0x1, 0x7, 0x774, 0x101, 0x9e, 0x8001, 0x0, 0x0, 0x6, 0x7, 0x1, 0x5, 0x3f, 0x8, 0x3, 0x8, 0xd7, 0x3e9, 0x8000, 0x800, 0x38000000, 0x100000000, 0x7f, 0x1, 0x401, 0x8000, 0x5, 0x1, 0x4, 0xffffffff, 0x81, 0xfff, 0x6, 0x9, 0x5, 0x4, 0x7, 0x8001, 0x4, 0x8, 0x7fff, 0x7f, 0x1000, 0x400, 0x1, 0x3, 0xffffffff, 0x4, 0x6b32d410, 0xff, 0x9, 0x3, 0x5, 0xffffffffffffff01, 0x7, 0x0, 0x3, 0x101, 0x7, 0x3, 0x2, 0x8001, 0x100, 0xffffffffffffff80, 0x0, 0xfff, 0x100, 0x0, 0x1, 0x3, 0x1, 0x9, 0x2, 0x3, 0x101, 0x8, 0x407, 0x7, 0x7fffffff, 0x7, 0xfffffffffffffffb, 0x3ff, 0x369a, 0x8, 0x3, 0x7, 0x7f, 0x69, 0x1, 0x4, 0x5, 0x6, 0x1, 0x1, 0x0, 0x8, 0x9, 0x6257, 0x101, 0x316, 0x401, 0x80000000, 0xfd, 0x101, 0x7, 0xff, 0x17, 0x100000001, 0xffffffff, 0x42d, 0x9, 0xb45, 0xf99, 0x401, 0x0, 0x80000000, 0x1, 0xb05, 0x9, 0x3, 0x5, 0x7, 0x0, 0xfff, 0x7f, 0x1, 0x7, 0x9, 0x8000000000000000, 0x4, 0xc8f, 0xff, 0x1, 0x6, 0x511, 0x7fff, 0x10001, 0x1, 0xfffffffffffff9ee, 0x100, 0x3, 0x446, 0xafa, 0xffffffff, 0x8, 0x2, 0x401, 0x8, 0xffff, 0x1, 0x1, 0x1000, 0x2, 0x8, 0x2, 0xe0, 0x10000, 0x4, 0x3, 0x4, 0x8000, 0x0, 0x9, 0x10001, 0xff, 0x4, 0x3, 0xfff, 0x40, 0xffffffffffffffff, 0x8, 0xa800, 0x3, 0x200000000000000, 0xff, 0xc1e4, 0x7f, 0x5, 0x3f, 0x2, 0x0, 0x3, 0xdb, 0x0, 0x8, 0x0, 0x5, 0x1ff, 0x10000, 0x456, 0xd0, 0x5a, 0x0, 0x0, 0x7, 0x2, 0x800, 0xfff, 0x3, 0xea, 0xfffffffffffffffb, 0xffffffff, 0x1, 0x2, 0xc0, 0x8, 0x203, 0x9, 0x8, 0x7ff, 0x9, 0x5, 0x200, 0xffffffffffffffc1, 0x4, 0x3f, 0x6, 0x80, 0xb2, 0x6, 0x7ff, 0x3, 0xd4, 0x7ff, 0xa0a, 0x9719, 0x3f, 0x7, 0x3, 0x7ff, 0x5, 0x0, 0x9, 0x8, 0x4, 0x4, 0x1de87310]}]}}, @TCA_RATE={0x8, 0x5, {0x8, 0x1f}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x824, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x61}, @TCA_HTB_RATE64={0xc, 0x6, 0x7fffffff}, @TCA_HTB_CTAB={0x404, 0x3, [0x810e, 0x8, 0xfff0000000000, 0x9, 0xfffffffffffffffa, 0x80000000, 0x46c, 0x3, 0x400, 0x6, 0x4, 0x7f, 0x7, 0x2, 0x9, 0x5, 0xfff, 0x4, 0xfffffffffffffff7, 0x7, 0x987, 0xffffffff, 0x0, 0xfa28, 0x0, 0x777, 0x8, 0x5, 0x8, 0x9, 0x9, 0x4, 0x4, 0x80000000, 0xffffffffffffff80, 0x4, 0x3ff, 0x1, 0x6521ce99, 0x6a3e, 0x4, 0x4, 0x2, 0x4, 0x80, 0x8, 0x6, 0x6, 0x4, 0xc9, 0x7ff, 0x2, 0x1, 0x3b5, 0x101, 0x8, 0x9, 0x7, 0x4b64, 0x8, 0x0, 0x8, 0x6, 0x81, 0x6, 0x7, 0x10000, 0x8, 0x0, 0x9, 0x80000000, 0x9, 0x8001, 0x81, 0x4, 0x404ebae7, 0x9, 0x81, 0xab, 0x9a2, 0x9, 0x262b, 0x1000, 0x8, 0x10001, 0x7fffffff, 0x487, 0x0, 0xffffffffffffff88, 0x5, 0xa5f, 0xffffffff, 0x3, 0x80000000, 0x3, 0x9, 0x9, 0x1, 0x9, 0x2, 0x8, 0x9, 0x1, 0x642, 0x7, 0x7, 0x3, 0x10001, 0x40, 0x6, 0x2, 0x100, 0x6, 0x1000, 0x3, 0x212, 0x9, 0x100000000, 0x5, 0x82, 0x4, 0xb40f, 0x1, 0xfffffffffffff669, 0x3ff, 0x1c8, 0xff, 0x1, 0x4, 0x5, 0x40, 0x7, 0xcc17, 0x3, 0x6, 0x6, 0x8, 0x7, 0xc48, 0x3ff, 0x0, 0xffffffff, 0x100000000, 0x100000000, 0x9, 0xd4, 0xffffffffffffffff, 0xffffffffffff0001, 0x1000, 0xf7cd, 0xd43, 0x5, 0x3, 0x3, 0x401, 0xffff, 0x40, 0x40, 0xe0, 0x9, 0x9, 0x7, 0x1, 0x4, 0x10000, 0x81, 0x1b, 0x7fff, 0x6, 0x9, 0x5, 0x40, 0x2, 0x100000000, 0xce, 0x8, 0x0, 0x0, 0x6, 0x4, 0x800, 0x1f, 0x80000001, 0x7, 0x6, 0x6, 0x81, 0x1, 0x2, 0x1, 0xec, 0x0, 0x240000000000, 0x3f, 0xfffffffffffffffd, 0x1000, 0x3, 0x98, 0x2, 0x6, 0x20000000000, 0xd696, 0x7df, 0x1, 0x4, 0x9, 0x3, 0x6, 0x80000000, 0xd24, 0x100, 0x0, 0x1, 0x57, 0xffff, 0x1f, 0x200, 0x2, 0x94c, 0xfffffffffffff001, 0x4, 0xec9, 0x40, 0x4000000000000, 0x8, 0xfffffffffffff001, 0x10000, 0x400, 0x5, 0x4, 0x0, 0x67, 0x8b, 0x20, 0x10001, 0x8, 0x3, 0x101, 0x101, 0x3, 0x7fffffff, 0x4, 0x7fffffff, 0x7f, 0x7f, 0xfffffffffffffff9, 0xb69, 0x10001, 0x0, 0x8, 0x0, 0x3, 0x8e, 0x7, 0x0, 0x6]}, @TCA_HTB_RTAB={0x404, 0x4, [0x8750, 0x3, 0x401, 0x1ca, 0xede, 0xfffffffffffff8ad, 0x9, 0x40, 0xc093, 0x200, 0x4, 0x0, 0x0, 0xffffffffffff733d, 0x1f, 0xfff, 0xa151, 0x5, 0x5, 0x74fc, 0x44a, 0x7b2, 0x3, 0x10000, 0x1, 0x6, 0x0, 0x5, 0x7, 0xfffffffffffffff7, 0x1, 0x1, 0x7fffffff, 0x0, 0x40, 0x0, 0x0, 0xffff, 0xffffffff, 0xffffffff, 0x0, 0x10001, 0x100, 0x1ff, 0x8b6, 0x2ec1bd3b, 0x20, 0x6, 0x7, 0x1, 0x4, 0x1, 0x1a, 0x6, 0x0, 0x3, 0x3, 0x5, 0x8, 0x1, 0xcc, 0x5, 0x2, 0x39, 0xffffffffffffff50, 0x9, 0xae3, 0x100000001, 0x1000, 0x10000, 0x2, 0x4ba0, 0x7c77fd6e, 0x2, 0x1, 0xfff, 0x6, 0x6, 0x1, 0x658, 0x2, 0x3, 0x0, 0x2, 0x7fffffff, 0xbc, 0x100000000000, 0x9, 0x25a81945, 0x7, 0x9, 0x1, 0x5, 0xfffffffffffffffc, 0x4, 0x3f, 0x8, 0xda7, 0x7, 0x7f, 0x4, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x80000000, 0x7, 0x9, 0x5, 0x4, 0x7e3, 0x9, 0x9, 0x3, 0x0, 0x6, 0x225, 0x7f, 0x7, 0x5, 0x9, 0x4, 0x5, 0x2, 0x4, 0x10001, 0x4, 0x2, 0xf1, 0xfffffffffffffff9, 0x4, 0xb53a, 0x3, 0x1, 0x4, 0x5, 0x7, 0x1ff, 0x9, 0x7fff, 0x3, 0x8, 0x0, 0x9, 0xd9, 0x80000000, 0x100000001, 0x6, 0x0, 0x9, 0xffffffff, 0x7, 0x932, 0x1fa, 0x3f, 0x7, 0x0, 0x200, 0x1ff, 0x1, 0x8, 0x8, 0x8, 0x7ff, 0x6, 0xfffffffffffffffb, 0x5, 0x631c, 0x3, 0x2, 0x20, 0x6, 0x100000000, 0x3f, 0x3f, 0x7, 0x6, 0xfffffffffffffff7, 0x100000000, 0x0, 0x1, 0x2, 0x80000001, 0xfff, 0x4, 0x8000, 0x0, 0x6, 0x0, 0x4, 0x7, 0xffff, 0x80200000000, 0x2, 0x4, 0xff, 0x6c3c, 0x401, 0x8, 0x100000000, 0x805f, 0x3, 0x1, 0x7, 0x200, 0x3, 0x6, 0x2cc, 0x5, 0xff, 0x4, 0xfffffffffffffff7, 0x3, 0xffff, 0x7, 0x1, 0x9, 0x7, 0x3, 0x10001, 0x8, 0x800, 0x60e83d07, 0x3, 0xfff, 0x0, 0x100, 0x9557, 0x800, 0x1000, 0x1, 0x1, 0x29, 0x406, 0x2, 0xfffffffffffff3cc, 0x1ff, 0x878d, 0x40, 0xb24, 0x20, 0xfff, 0x288b, 0x7, 0x4, 0x400, 0x6, 0x9, 0x8, 0x3, 0x9, 0x2, 0xca, 0xfebc, 0x2, 0x10000]}]}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x64, 0x2, [@TCA_ATM_HDR={0x24, 0x3, "c4a7865b68e1d10306c684d26686f85bece8b02eb87992f9bde7e17e0fcb"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0xc, 0x3, "238be8cf25d46b"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xf}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xe, 0xffff}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xffff}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1a, 0x1e}}]}}, @TCA_RATE={0x8, 0x5, {0x7fff, 0x10000}}, @TCA_RATE={0x8, 0x5, {0xb88a}}, @tclass_kind_options=@c_cbq={{0x8, 0x1, 'cbq\x00'}, {0x24, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x2}, 0xb5, 0x269}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0xf}, 0x7, 0x2}}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xd07a}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}]}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x74, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x8001, 0x7, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x100, 0x7ff}}, @TCA_HFSC_USC={0x10, 0x3, {0x7fffffff, 0x8, 0x1f}}, @TCA_HFSC_FSC={0x10, 0x2, {0x100, 0x1, 0x80}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xffff, 0x3f}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x3, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x80000000, 0x800}}]}}, @TCA_RATE={0x8, 0x5, {0x5, 0x5e0e}}]}, 0xdb4}, 0x1, 0x0, 0x0, 0x8841}, 0x4884) r3 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)=""/243, &(0x7f0000000300)=0xf3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xd2, "01a99e74f2494fa7d35c7eb65816b39a411649656fc8bbd30663d128c7d98e3668ff52cc00d0643857201ae9a305fc82b208a23cb977daab96027062ad93927c138a76b28d74713d88549ea10fb9ada5eb32a0059bc5b8eb8944d4fe56bc79d1301ef2ebbef6c1a26365f5e9eee74da86e8db34a8484bd7b7f51e192229939bc86f8ad371764aa84d3ef748d0b7d46b234af620059b07711b5e5a8ee260d85f5e9d13b5e3039544da40be662b3c16bc38c432ce5297fd84dba20688fc6ae96dc18332e396e74f135b65ca91aee9f646bb12d"}, &(0x7f0000000140)=0xda) ioctl$KDSKBLED(r1, 0x4b65, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r4, 0x2f, "aff627f87de6d629b3c9b872cb5f7e782536978bd3d1dd3b69367c6ef6ce056afa3990ed97704ce805ac3c3351c4c6"}, &(0x7f00000001c0)=0x37) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000)={0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:26 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffeb}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:26 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x8c000020}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 364.232463] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 364.239906] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 364.388217] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 364.395613] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x1f00}) 00:44:27 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x3, r1, 0x1}) 00:44:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x40000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:27 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) fcntl$setstatus(r0, 0x4, 0x40400) 00:44:27 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x0, 0xa}, 0x0) 00:44:27 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0xbf00000000000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x4000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) flistxattr(r0, &(0x7f0000000000)=""/17, 0x11) unshare(0x400) pselect6(0x40, &(0x7f0000000040)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0xffffffffffffff45}) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r1) 00:44:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xf401}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe803}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda00}, &(0x7f0000768000)={0x40000000000000}, &(0x7f0000086000)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000000000)={0x901}, 0x8}) 00:44:27 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x14}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:27 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x700000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 365.393828] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 365.401235] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 365.548863] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 365.556279] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0xfffffdfd}) 00:44:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x26002, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffffff7f00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:28 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x1, 0x644, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x100, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x3}, @in6={0xa, 0x4e20, 0x2aa, @mcast2={0xff, 0x2, [], 0x1}, 0x9e0000000000000}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0405244e034bc06ff704cac7900f2b8e70205cc80e39e92b17791e2009338cf5"], 0x14) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) bind$rds(r1, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x5}, 0x10) 00:44:28 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x0, 0xf}, 0x0) 00:44:28 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xe0ffffffffffffff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x7000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) write(r0, &(0x7f0000000000)="ea4319c1737844e15e09fd3f97a46986792d6d5ed1beeecd4e57f72937e46a927bbf4fd9663b68575cea1d0c3435a6868941866cbb732b821799c3b1518f84053b0251130c55cc8922d22fb6f510c16ab816315f5f424b21018eeb2fe75b2c59dfa25e6029cf0744eb27bb070bc4d06825", 0x71) 00:44:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xfffffdef}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x7}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:28 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000), 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) setns(r0, 0xe000000) 00:44:28 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x2000008c}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 366.544464] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 366.551854] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 366.700962] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 366.708491] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0xfffffdfd}) 00:44:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x4000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:29 executing program 2: r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000040)="c0f0e1e701ee68ecce71d3e0f8b10b4ed77dde22f486437dea135dee49246429eab1819afc582cab89b7eec40ea1c7419c7a92ed4e4779fabc9e822a88dca1b46fab5853720a6dbce3ee9a1f0f3697dcf1504fd72deb131775921c47b54d9b90675218949e49460214120621e88dc7f0da", 0x71, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/151) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:29 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x0, 0xa00000000000000}, 0x0) 00:44:29 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x1b, 0x4) 00:44:29 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x8000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xc0ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:29 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) syslog(0xf, &(0x7f0000000000)=""/74, 0x4a) unshare(0x400) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200000, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1f4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xeffdffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:29 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) fanotify_mark(r0, 0x26, 0x10001, r1, &(0x7f0000000000)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000040)={0x6, 0x7, 0x18a6, 0x0, 'syz1\x00', 0x2}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe000000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 367.709140] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 367.716617] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 367.861527] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 367.869065] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x1f00000000000000}) 00:44:30 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffffff7f00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:30 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_create1(0x80000) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x400) pselect6(0xfffffffffffffe8a, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x7ceefb74}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0xffffffffffffffce, 0x0, 0xfffffffffffffffd}, &(0x7f0000086000)={0x0, 0x4}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0xffffff53}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) 00:44:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x8c00002000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:30 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x0, 0x1100000000000000}, 0x0) 00:44:30 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:30 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, "706f72543000000000001300001100000063a9ad6d0000000000000000000000000000000000000000000000000000f0fffbffffffffff0004c749cc00", 0x3f, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x23, 0x0, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0x40000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x97ffffff00000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x97ffffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffffff97}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x14}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x400900, 0x0) pread64(r0, &(0x7f0000000000)=""/19, 0x13, 0x0) unshare(0x30010304) pread64(r0, &(0x7f0000000140)=""/218, 0xda, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x400, 0x934}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={r2, 0x42, "48c8b9caa86676ab49eda465f8b52c93d5f6a63c964a9da6c67c9884d80a9f6d6dd973a11207567a09af636424c9fac6396565cd3475798b12d5c908eb87021d2a2f"}, &(0x7f00000002c0)=0x4a) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) select(0x40, &(0x7f0000000300)={0xfffffffffffffff8, 0x6, 0x8, 0x2, 0x3f, 0x7, 0x7ff, 0x5}, &(0x7f0000000340)={0x3, 0x529577bc, 0x0, 0x4, 0x6, 0x3, 0xf6}, &(0x7f0000000380)={0x3, 0xf8a6, 0x8, 0x80000001, 0x1000, 0x42, 0x1f, 0x1ff}, &(0x7f00000003c0)={0x0, 0x7530}) 00:44:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x100000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 368.833941] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 368.841387] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 368.988315] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 368.995761] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0xfdfdffff00000000}) 00:44:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x900000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:32 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c4bd3b1ed07ff7c14edc4a2c8a4874cca714f2f1274e8ee06a7a4cf9aed787cbf9bcb8af790e4d31f5d84471727022e5499bf7b0fc7cd839372e8dd9f790694e7eb319b00000000000000000000", @ANYRES16=r1, @ANYBLOB="000025bd7000fcdbdf250a00000008000600080000000800040006000000080006001f0000001c00030008000300010000000800050000000000080008003f000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r2 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000380)=r2) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r4, 0x30, 0x0, @ib={0x1b, 0xf38, 0x3, {"3a1bc7c7ee31b069783e888d8aa2e617"}, 0x3, 0x1, 0x4}}}, 0xa0) unshare(0x10000100) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000003c0)={0x4, 0x0, [{0x80000008, 0x4, 0x1, 0xd5, 0x0, 0x66be, 0x1}, {0x40000006, 0x101, 0x1, 0x0, 0x1, 0x800, 0xbbf4}, {0xc0000000, 0x20, 0x4, 0x3f, 0xf8, 0x5, 0x6}, {0x80000000, 0x2, 0x4, 0x5, 0x7ff, 0x81, 0x10000}]}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe0000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:32 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x0, 0x11000000}, 0x0) 00:44:32 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xe0ff]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:32 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0xbf00]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x4}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x14}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:32 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x426800, 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r2, &(0x7f0000000140)=""/46, 0x2e) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000180)=""/162, &(0x7f0000000240)=0xa2) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x4}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000000000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xe803000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x200000000000000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:32 executing program 2: memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x5c010100) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x1400000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:32 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x100000000000000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 370.005795] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 370.013239] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 370.160830] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 370.168237] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. 00:44:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x1f000000}) 00:44:33 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x17, &(0x7f0000000000)=""/43, &(0x7f0000000040)=0x2b) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xeffdffff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x97ffffff00000000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:33 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x0, 0xf000000}, 0x0) 00:44:33 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0xe0]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:33 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/140, 0x8c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x8000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000002c0)) fdatasync(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) rt_sigtimedwait(&(0x7f0000000040)={0x1f}, 0x0, &(0x7f0000000180), 0x8) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x282, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)={0x5, "0844afe6a1"}) 00:44:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0xbf000000]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0xe8030000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x900}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:33 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) sendmsg(r0, &(0x7f0000000980)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x10a00241}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000080)="af1e94524f075958039f70a2be6f9402298b9cdc593afd3984458d4019857be85e41c5931521e2f6320c05c9857eaadeb845fe46ed9c4b722ad55d498d7b1a5af9", 0x41}, {&(0x7f0000000140)="5187f88a0361755d25943258f9e715bcfba75ce08b86fca9f117b7a4b59e12979f3472bf14257174cad0641110c0906b71acdaf10bb63b09a743b20491974e116a5f9bc1fa7b60d94421af3d4e5249ff31baf8482cdeaf379e7c409e6aea409336051f5c36ffab34d609ea7d5d8e2b2787a6d1a851a849dec7e8ea0fec302ea989a65c141589218c189f24936f7de3", 0x8f}, {&(0x7f0000000200)="b82a966d3f2cec94499c2b5ee49c82ffcd44be8765e0052b9c2aaf667db1c3e56f319415586416a9346c558477e99adab9f9db9e64cf381bbfba84b886ff2e810bc382b24474cae390c5840bc018a153cd439b8a19f028b6da3d7918cdc810d282481b08bac0d23a67f9eff0cba34c41f21f849dcf76a80f37957b966f6a00bf63fbe1780ac6911b68a268951839ea639f76edcd0303bb44bca2ae359a7131f5237b8ae71653c60e8a4c74d9de4423dd59897a6b124b22f4d9de8c142a992816241751b6c62e7030120f73df17f6d14cfc95c17c41fbf9c5558df9d8735d6c0c66928c59ec23ce3209b1e8c62a", 0xed}, {&(0x7f0000000300)="6ebbde913af695871af4b4b9bc7c2688fac149e16b6c842dede2672ade9aa5060f6b5a32e891683bfac3dade5d17199037e311942b6a6830bfcec8cfe680dd0f08e4db520353d9f0ab88edc3c9de4df99749a6e72dfa2197d3934f1ca4161c567cb181f9b585c9d1be6df3724a1b6e8141ab6e6e67407cb32539949535270fd133bdb05b0f504b2b1acdfb150716c5f9fab24c46118fa83d23e81ed72bb403bc50c7bd54e4187a68508afca49121b515449e9cb071139144d5c9388a0d775f0446160572bcf31c1d4c8c352a2c1edd8a1079a5fca5407094b070f33985c5baeaaf0eae1ab32c235405636a095bf5d3f278a9dc214778eaed10", 0xf9}, {&(0x7f0000000400)="4397ea0afca07e26a6b2ca61ee9e961ac2a9579641a549ace94775ff3dcacdf945510a8e90e79583445ccc46c94f9c1fb67d2899d6c108b3861097c807b83b6145c99daa509557404893d69e3f39a94c265d12a865b5d98c2dfa4d32a0d99698d9f3f887d6a0f45dbb714f863936f727be9a8787090fa748ef38e1715e1a5a985256e69d6e4f8569f6d44745a84f4fe8fa13e7ebf5406551c6b37467f55f86237f8df0b09fb2f38deaaae1c7c4fcdd6dd75d2ae285c813496f9858e25df9150f0865aac209e3883a27c9623c471e13435158d58732878e310e2c7dc65784467c25f6cf6b1e7c30fe42cc1be980cb46eb89a9f0c5794dabf02724", 0xfa}, {&(0x7f0000000500)="3ebca7cb002294df3791ef96a9254b342faab22a2fdd091cff201c090dbd06916f78eb0bf4a1ed7a739a2fc417fc9397f416a9590d70ea33a4b4ffe7390a8b3d76db5f10ffcd74f9e5d257c930c80c918d5d45343ab82609b6b628e39935b7a5d048eb9213512d0b1620936ac72390d44c958d50545619808198ead5c928f57d731b9e2205583f8e96756ada3080a11d6c21f539f6697076d552611995603d780577181fce7bf1f7f3d91bb855198d64137d4d4aec5ddaea47e959dbbb", 0xbd}, {&(0x7f00000005c0)="799b574cfa11ed7a815f364a0dfef56229a1caed875923d42c03b552f6a26845156181b2a8787967a7bbef37e9405f78a9e024805b833bbbc965d0c97610d275580c68ea1d163dacad15400bffd43f9ee20dc9b94c5d21d7aa24d62e9f08bdb78f0af8e33d38a73d0d6316268ec601d924defcad1538137e788bed3f2b69586c27476409e2dfd22ad4e2b362199a662edf43da46686cf4a166728eae7811a9b3faa10a5789cb25c323aa35ddce966496a5446763ad3b6ae76fb060cc7db23c22cd9f198ed2a15fe4a96817", 0xcb}, {&(0x7f00000006c0)="31966ebecc0f3b549f2df216509f29f0eac848a9d5a7833b029313c00c2c92a9ad6cff7cb1aec33f7de02356adcd65", 0x2f}, {&(0x7f0000000700)="a24b2e3daa15263de5e4b18a3b47154c0a6b05af937e0a9499758490077e3946e067c043fc633fde3fc0427b891f48cbe9adee65b169adbc60645ce72141fd9db4c66d08664800e974ec5b7c595eb321f19a3955ead5c17b40203175298a7b972c22fbdb23d8c1b207e3e18eac1156686af9ffae1d3b35950d2f6f95f24734ba43c730a92478d30c077e9df5bbec82f78441ecf38e4f928bd098a4228da38a3e13236d9ceaa5468a01d4d9f76125589e5cdde2", 0xb3}], 0x9, &(0x7f0000000840)=[{0x104, 0x172941d510d6ac60, 0x200, "061d2f72574f29e45a09e024e47a45d417e348739c428c93895e68fe553abcd3e5992c203a221427d8e8a76859b9f659d6071bdbbdf3299dca7734102bde6411cfc49d40d690aaeb3a7641382c6b437798c3cbfa6a7d576666497511113d4287df214eb58463d4280cf9fae1afbae7fdd3e2393559a84eb69694dca3b4a90961b2657ed03729ad57583503da96172a19d9ea55b1355dc35e3445d5351a98ed6a3591a1e4e7aff5c17f68c0368870fa55c4c6c8ab31e58733e796e0a3b3beae805a8061c5b4aefdb5eb5fccdc889332eca7552980fb0ec7d1e46dbe32fc556cdd4e55ddab66d0387dade52d8d78caddf63137563703"}, {0x24, 0x0, 0x6, "55ece7db88916d2fa4e2a4d96a5404ec65c0d402cb"}], 0x128, 0x20000000}, 0x80) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x800000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x1400000000000000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20400, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0x700000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:33 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x800000000000000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 371.263349] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 371.270779] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 371.274087] Unknown ioctl -2143244641 [ 371.416921] netlink: 'syz-executor7': attribute type 6 has an invalid length. [ 371.424345] netlink: 1 bytes leftover after parsing attributes in process `syz-executor7'. [ 371.463829] Unknown ioctl -2143244641 00:44:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x8c000020}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0xfdfdffff}) 00:44:34 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x94c00, 0x0) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) 00:44:34 executing program 7: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f000079e000)=[{&(0x7f0000085000)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940)}, 0x0) 00:44:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xebff0000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/140, 0x7d2aac549c04d2f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x3d8cb47d95373def}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x3, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e20, @loopback=0x7f000001}, {0x2, 0x4e24, @rand_addr=0x9c0}, 0x2, 0x7ff, 0x2, 0x81, 0x0, &(0x7f0000000040)='bridge_slave_1\x00', 0x9, 0x9, 0x5}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0x404c534a, &(0x7f00000001c0)) 00:44:34 executing program 4: r0 = socket$inet(0x2, 0x100000000005, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="f0", 0x1}], 0x1}, 0x0) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x80, &(0x7f0000003880)=[{&(0x7f00000037c0)="e2", 0x1}], 0x1, &(0x7f0000003940), 0x0, 0x2}, 0x0) 00:44:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xffff000000000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0xebff}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) unshare(0x400) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x6, 0xbca7, 0x2, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r2, 0x3f, 0x0, 0x8001, 0x1}, &(0x7f00000000c0)=0x18) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 00:44:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa000000}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x400000000000000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xa00}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x7ff, &(0x7f0000000f40)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000340), 0x87}]) memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x0) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) pipe(&(0x7f0000000000)) 00:44:34 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}, 0x9000000}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) 00:44:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in={0x2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0, 0xebff}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast=0xffffffff}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000080)=[{0xc}], 0xc}}], 0x2, 0x0) [ 371.847871] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 371.856016] PGD 1d8c7e067 P4D 1d8c7e067 PUD 1a82ea067 PMD 0 [ 371.861837] Oops: 0010 [#1] SMP KASAN [ 371.865716] CPU: 1 PID: 23854 Comm: syz-executor2 Not tainted 4.18.0-rc2+ #24 [ 371.872980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.882435] RIP: 0010: (null) [ 371.886318] Code: Bad RIP value. [ 371.889703] RSP: 0018:ffff8801a0dbf3e8 EFLAGS: 00010246 [ 371.895069] RAX: 0000000000000000 RBX: ffff8801d2a1fb00 RCX: ffffc90005e3c000 [ 371.902345] RDX: ffff8801a0dbf6a0 RSI: ffff8801d2a1fb00 RDI: ffff8801bedad500 [ 371.909700] RBP: ffff8801a0dbf490 R08: ffff8801b38a0580 R09: ffffed0035f41b70 [ 371.916966] R10: ffffed0035f41b70 R11: ffff8801afa0db83 R12: ffff8801a0dbf6a0 [ 371.924316] R13: ffff8801bedad500 R14: ffffffff8818a920 R15: ffff8801a1dd05c0 [ 371.931590] FS: 0000000000000000(0000) GS:ffff8801daf00000(0063) knlGS:00000000f5fd7b40 [ 371.939802] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 371.946136] CR2: ffffffffffffffd6 CR3: 00000001d7868000 CR4: 00000000001406e0 [ 371.953396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 371.960829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 371.968095] Call Trace: [ 371.970693] ? sock_poll+0x2e1/0x490 [ 371.974394] ? kernel_sendpage_locked+0x120/0x120 [ 371.979246] ? kernel_sendpage_locked+0x120/0x120 [ 371.984344] do_select+0xac4/0x1b00 [ 371.987981] ? select_estimate_accuracy+0x4b0/0x4b0 [ 371.993000] ? drop_futex_key_refs.isra.14+0x6d/0xe0 [ 371.998116] ? __lock_acquire+0x7fc/0x5020 [ 372.002346] ? trace_hardirqs_on+0x10/0x10 [ 372.006569] ? futex_wake+0x304/0x760 [ 372.010365] ? graph_lock+0x170/0x170 [ 372.014158] ? trace_hardirqs_on+0x10/0x10 [ 372.018381] ? find_held_lock+0x36/0x1c0 [ 372.022426] ? lock_downgrade+0x8f0/0x8f0 [ 372.026574] ? kasan_check_read+0x11/0x20 [ 372.030710] ? rcu_is_watching+0x8c/0x150 [ 372.034846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 372.040364] ? compat_get_bitmap+0x1c1/0x260 [ 372.044764] compat_core_sys_select+0x848/0xb10 [ 372.049426] ? compat_core_sys_select+0x848/0xb10 [ 372.054268] ? do_select+0x1b00/0x1b00 [ 372.058142] ? lock_downgrade+0x8f0/0x8f0 [ 372.062280] ? check_same_owner+0x340/0x340 [ 372.066588] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 372.071585] ? __set_current_blocked+0xe4/0x120 [ 372.076242] ? sigprocmask+0xfc/0x310 [ 372.080040] ? sigsuspend+0x270/0x270 [ 372.083836] ? _copy_from_user+0xdf/0x150 [ 372.087968] do_compat_pselect+0x239/0x4d0 [ 372.092186] ? do_compat_select+0x270/0x270 [ 372.096497] ? putname+0xf2/0x130 [ 372.099933] ? rcu_read_lock_sched_held+0x108/0x120 [ 372.104938] ? __x32_compat_sys_get_robust_list+0x430/0x430 [ 372.110639] ? filp_open+0x80/0x80 [ 372.114165] __ia32_compat_sys_pselect6+0x1f5/0x280 [ 372.119164] do_fast_syscall_32+0x34d/0xfb2 [ 372.123474] ? do_int80_syscall_32+0x890/0x890 [ 372.128045] ? _raw_spin_unlock_irq+0x27/0x70 [ 372.132528] ? finish_task_switch+0x1d3/0x890 [ 372.137017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.142543] ? syscall_return_slowpath+0x31d/0x5e0 [ 372.147460] ? sysret32_from_system_call+0x5/0x46 [ 372.152285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 372.157116] entry_SYSENTER_compat+0x70/0x7f [ 372.161509] RIP: 0023:0xf7fdbcb9 [ 372.164848] Code: 55 08 8b 88 64 cd ff ff 8b 98 68 cd ff ff 89 c8 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 1c 24 c3 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 372.183977] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000134 [ 372.191681] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000020f33fc0 [ 372.198932] RDX: 0000000020768000 RSI: 0000000020086000 RDI: 0000000020349000 [ 372.206188] RBP: 0000000020f14000 R08: 0000000000000000 R09: 0000000000000000 [ 372.213447] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 372.220706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.227968] Modules linked in: [ 372.231155] Dumping ftrace buffer: [ 372.234674] (ftrace buffer empty) [ 372.238373] CR2: 0000000000000000 [ 372.241977] ---[ end trace b37f67b9853ab8cf ]--- [ 372.246770] RIP: 0010: (null) [ 372.250704] Code: Bad RIP value. [ 372.254122] RSP: 0018:ffff8801a0dbf3e8 EFLAGS: 00010246 [ 372.259518] RAX: 0000000000000000 RBX: ffff8801d2a1fb00 RCX: ffffc90005e3c000 [ 372.266814] RDX: ffff8801a0dbf6a0 RSI: ffff8801d2a1fb00 RDI: ffff8801bedad500 [ 372.274116] RBP: ffff8801a0dbf490 R08: ffff8801b38a0580 R09: ffffed0035f41b70 [ 372.281414] R10: ffffed0035f41b70 R11: ffff8801afa0db83 R12: ffff8801a0dbf6a0 [ 372.288714] R13: ffff8801bedad500 R14: ffffffff8818a920 R15: ffff8801a1dd05c0 [ 372.296016] FS: 0000000000000000(0000) GS:ffff8801daf00000(0063) knlGS:00000000f5fd7b40 [ 372.304302] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 372.310210] CR2: ffffffffffffffd6 CR3: 00000001d7868000 CR4: 00000000001406e0 [ 372.317524] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.324831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.332121] Kernel panic - not syncing: Fatal exception [ 372.337966] Dumping ftrace buffer: [ 372.341491] (ftrace buffer empty) [ 372.345178] Kernel Offset: disabled [ 372.348785] Rebooting in 86400 seconds..