51][T26269] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 729.802262][T26269] __sys_sendmmsg+0x53a/0xae0 [ 729.806983][T26269] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 729.812900][T26269] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 729.819005][T26269] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 729.824752][T26269] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 729.830671][T26269] __se_sys_sendmmsg+0xbd/0xe0 [ 729.835464][T26269] __x64_sys_sendmmsg+0x56/0x70 [ 729.840340][T26269] do_syscall_64+0xbc/0xf0 [ 729.844782][T26269] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 729.850708][T26269] RIP: 0033:0x459a29 [ 729.854653][T26269] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 729.874293][T26269] RSP: 002b:00007f2708a8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 729.882739][T26269] RAX: ffffffffffffffda RBX: 00007f2708a8ac90 RCX: 0000000000459a29 [ 729.890728][T26269] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 23:24:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 729.898743][T26269] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 729.906728][T26269] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a8b6d4 [ 729.914729][T26269] R13: 00000000004c722e R14: 00000000004dca80 R15: 0000000000000007 23:24:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@ipv6_delroute={0x24, 0x19, 0x339, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x9}}, 0x0) 23:24:46 executing program 5: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x100000000000012, 0x7, 0x1, 0x3, 0x0, "", {{}, [{{0x9, 0x5, 0x82, 0x2, 0x355}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x1, 0x3f, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x7, 0x24, 0x6, 0x0, 0x0, 'DL'}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x578, 0x5, 0x400, 0x1}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x109, 0x3f, 0x83, 0xcc}}, {{0x9, 0x5, 0x3, 0x2, 0x32f, 0x81, 0x7f, 0x3f}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0x1a, 0x31, 0x8}, 0x41, &(0x7f00000001c0)={0x5, 0xf, 0x41, 0x3, [@generic={0x2b, 0x10, 0xb, "33a6510f331be2f0861d08577cb9161bb561a857dbeef0ea19e7f51356f26dd4ee541b35ace3da30"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x3, 0x9, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x18, 0x5b, 0xe8, 0x9}]}}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f0000000580)={0x20, 0xb, 0x37, {0x37, 0xf, "472e194a3009351796655cc073ef350d9837862ac9ea8fe66837e7c0c20f7bd535e3834423a3a245ee3c4b47e97f387c31f34905f7"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x1c, &(0x7f0000000640)={0x40, 0x1, 0xfc, "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"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x3}}) syz_usb_connect$cdc_ncm(0x5, 0x1f7, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e5, 0x2, 0x1, 0x1f, 0x9809a9a0f4c6801b, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x8b, {{0x6, 0x24, 0x6, 0x0, 0x1, "a7"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x9, 0x6}, {0x6, 0x24, 0x1a, 0x1ff}, [@call_mgmt={0x5, 0x24, 0x1, 0x422305c6d2e0b2fd}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x5, 0xff, 0x7, 0x6, 0x8}, @mdlm_detail={0xe2, 0x24, 0x13, 0x98, "9dadf846b72294d888a7b714d9a0945caaa65854a82856f0ae8ffa7376b9bdafbd4cb8fe36c502324e4c7f246ca8465fa98f408458135c71861a2899f55e54d5bd987bd94b939ca4522187fc1397a0814a24c34abe16f1df37a571925fea39c478e9c88a953c1b35335e68aa2e5908b4478a98e9cd5312babe23854ef52f82b1736b1889bb8362870a59ca971a45daa0e534f19f03c6ed1021a6b73f49d741cb4e4a1ac3a6417353d9ee1409ccebfca1d5e331046df9fdf069ff5cd122d34e9717e6d9c2983843cf15bf581a4ca7b9f7940b5deb6b299dc46e0c820500e3"}, @country_functional={0x8, 0x24, 0x7, 0x4, 0x8, [0xff81]}, @mdlm_detail={0x8d, 0x24, 0x13, 0x81, "ce22f0d1d251317a6db51428067d78f940568901adf22bdf08a50fcae5defe991898c95945a2991010ff65237b7bcbe199f58100e97ca997e5e3e2d75c37cf32e8f1677f6f02e48b324779ee40972220388e8b025635b845748e3731865d243b221be6f95521b498ec11212eefb23c8590510f1b4bf961f84630081330387d9f58ebeb3975d4c856a2"}]}, {{0x9, 0x5, 0x81, 0x3, 0x114, 0x1, 0x1f}}}, {0x9, 0x4, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0xa}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x4, "", {{{0x9, 0x5, 0x82, 0x2, 0x54, 0x5, 0x0, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0xcd, 0x8, 0x0, 0x7f}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x9, 0xff, 0x0, 0xff, 0x2}, 0x17, &(0x7f0000000840)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x6, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4e, 0xc0, 0x9, 0x1, 0x70}]}, 0x1, [{0xa5, &(0x7f00000002c0)=@string={0xa5, 0x3, "8aa947f1067606f0d93625951f5d000930b5a21bff4a963c45d39ee9aebb3e0fc4c60770d9bc3f5af09ed19eb6ad12919f7ec9c472590d1df86bc6fd6aa5f42593b1196aaab89977be82b81f4ba6a2408423b88cd0cba56e4dedb65d2f73da936628b95f98b8cd16c36af6bcf22fcd053c7906ed447bd8a23b361b78894a977b3c21bc9aae066cefb5ee1c1b9e8375b137814e9c0856a260ae0d6f68c619e17ef61fad"}}]}) [ 730.361850][ T31] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 730.601806][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 730.722062][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 730.731975][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853 [ 730.742343][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 730.755620][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 730.764781][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.255075][ T31] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 731.456219][T23596] usb 6-1: USB disconnect, device number 38 [ 731.474593][T23596] usblp0: removed 23:24:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:47 executing program 3 (fault-call:9 fault-nth:5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:47 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/49, 0x31}, {&(0x7f00000001c0)=""/249, 0xf9}], 0x2, &(0x7f0000000300)=""/250, 0xfa}, 0x80000000}, {{&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000001700)=[{&(0x7f0000000480)=""/218, 0xda}, {&(0x7f0000000580)=""/159, 0x9f}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x4, &(0x7f0000001740)=""/107, 0x6b}, 0x10000}], 0x2, 0x100, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x12200, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000000c0)=0x6, 0x4) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000080)={0x1}, 0x8) sendmmsg(r1, &(0x7f0000000600), 0x3ffffffffffffde, 0x2401c0c4) 23:24:47 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="b4f8e667659a86ba715e743ebccdbf19b364c881d498ca44c0e2a154499dac64ed4cb384e883d481f52325262e4e82d8e4a7c627c2aed1168a6648386340cd203d88df54f47a14a3b58b0e5d5c72a4d4c6ef6d293e9f62f3aa7a293f96903e8ff4778ef6d3a6cedc48942944e655d2dd52ea8a75b785090e27face7ccc909429da4db189fbf7e5395cb3ba7ac36e4a1c5f5662decd5c04d02eb27f54f4b7e0e215f6eb171fcc2af80b38c16cc43ad0ac256c17a929c6f6ecb21c1177c0bee8d2b3f2f1ed9e1339bcbebcebd91025c82a3e36e2ed66e7506d4f"]], 0x8) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x46) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./bus\x00', 0x100000141142, 0x4) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x6, 0x5]}, 0x8) 23:24:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 731.823182][T26297] FAULT_INJECTION: forcing a failure. [ 731.823182][T26297] name failslab, interval 1, probability 0, space 0, times 0 [ 731.836330][T26297] CPU: 1 PID: 26297 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 731.844802][T26297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.854907][T26297] Call Trace: [ 731.858270][T26297] dump_stack+0x191/0x1f0 [ 731.862672][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 731.868628][T26297] should_fail+0xa3f/0xa50 [ 731.873097][T26297] __should_failslab+0x264/0x280 [ 731.878059][T26297] should_failslab+0x29/0x70 [ 731.882683][T26297] __kmalloc_node_track_caller+0x1cd/0x1320 [ 731.888603][T26297] ? netlink_trim+0x3d4/0x430 [ 731.893321][T26297] ? netlink_trim+0x3d4/0x430 [ 731.898016][T26297] pskb_expand_head+0x21c/0x19f0 [ 731.902971][T26297] ? __se_sys_sendmmsg+0xbd/0xe0 [ 731.907926][T26297] ? __x64_sys_sendmmsg+0x56/0x70 [ 731.912980][T26297] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 731.919064][T26297] ? __se_sys_sendmmsg+0xbd/0xe0 [ 731.924014][T26297] ? __x64_sys_sendmmsg+0x56/0x70 [ 731.929054][T26297] ? do_syscall_64+0xbc/0xf0 [ 731.933675][T26297] ? update_stack_state+0xa12/0xb40 [ 731.938912][T26297] netlink_trim+0x3d4/0x430 [ 731.943456][T26297] netlink_broadcast_filtered+0x14c/0x1c40 [ 731.949305][T26297] ? nla_put+0x24d/0x310 [ 731.953576][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 731.959681][T26297] netlink_broadcast+0xf6/0x110 [ 731.964563][T26297] rtnetlink_send+0x28c/0x2b0 [ 731.969276][T26297] __tcf_chain_get+0x9f3/0xbe0 [ 731.974071][T26297] tc_new_tfilter+0x1a82/0x4ce0 [ 731.979052][T26297] ? kmsan_internal_set_origin+0x6a/0xb0 [ 731.984722][T26297] ? refcount_dec_and_test_checked+0x14c/0x210 [ 731.990955][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 731.997042][T26297] ? tcf_block_offload_unbind+0xa50/0xa50 [ 732.002781][T26297] ? tcf_block_offload_unbind+0xa50/0xa50 [ 732.008528][T26297] rtnetlink_rcv_msg+0xcb6/0x1580 [ 732.013582][T26297] ? do_syscall_64+0xbc/0xf0 [ 732.018211][T26297] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 732.024397][T26297] ? update_stack_state+0xa12/0xb40 [ 732.029625][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.035547][T26297] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 732.041637][T26297] ? rhashtable_jhash2+0x3a9/0x4d0 [ 732.046783][T26297] ? kmsan_internal_set_origin+0x6a/0xb0 [ 732.052589][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.058530][T26297] netlink_rcv_skb+0x431/0x620 [ 732.063332][T26297] ? rtnetlink_bind+0x120/0x120 [ 732.068327][T26297] rtnetlink_rcv+0x50/0x60 [ 732.072977][T26297] netlink_unicast+0xf6c/0x1050 [ 732.077888][T26297] netlink_sendmsg+0x110f/0x1330 [ 732.082878][T26297] ? netlink_getsockopt+0x1430/0x1430 [ 732.088299][T26297] ___sys_sendmsg+0x14ff/0x1590 [ 732.093347][T26297] ? kmsan_internal_set_origin+0x6a/0xb0 [ 732.099026][T26297] ? kmsan_internal_set_origin+0x6a/0xb0 [ 732.104687][T26297] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 732.110871][T26297] ? __fget_light+0x6b1/0x710 [ 732.115676][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.121694][T26297] __sys_sendmmsg+0x53a/0xae0 [ 732.126432][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.132356][T26297] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 732.138451][T26297] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 732.144210][T26297] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.150128][T26297] __se_sys_sendmmsg+0xbd/0xe0 [ 732.154935][T26297] __x64_sys_sendmmsg+0x56/0x70 [ 732.159806][T26297] do_syscall_64+0xbc/0xf0 [ 732.164261][T26297] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 732.171122][T26297] RIP: 0033:0x459a29 [ 732.175039][T26297] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 732.194672][T26297] RSP: 002b:00007f2708a8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 732.203115][T26297] RAX: ffffffffffffffda RBX: 00007f2708a8ac90 RCX: 0000000000459a29 [ 732.211104][T26297] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 23:24:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 732.219264][T26297] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 732.227249][T26297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a8b6d4 [ 732.235235][T26297] R13: 00000000004c722e R14: 00000000004dca80 R15: 0000000000000007 23:24:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r2, 0x5401, 0x71dff8) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/71, 0x47}, {&(0x7f0000000100)=""/64, 0x40}, {&(0x7f00000003c0)}], 0x3) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="ea6b72ae96f9e0080809863d8a039e614ee281ea4659f7bb7d10cf5be05962a64683a0ea1daff8a4d3ab6145ee5b68cc7e6df74e201718fc813750283360bb20579da3", 0x43}], 0x1, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) connect$can_bcm(r4, &(0x7f0000000300)={0x1d, r5}, 0x10) 23:24:48 executing program 3 (fault-call:9 fault-nth:6): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:48 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x116, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) 23:24:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 732.532748][ T31] usb 6-1: new high-speed USB device number 39 using dummy_hcd 23:24:48 executing program 2: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x67, 0x4e, 0x82, 0x20, 0x5a9, 0x511, 0x8d5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaf, 0x0, 0x0, 0x14, 0x81, 0xf0}}, {{0x9, 0x4, 0x4b, 0x0, 0x0, 0x74, 0x8a, 0xf2}}, {{0x9, 0x4, 0x6e, 0x0, 0x0, 0x27, 0xb6, 0x8}}]}}]}}, 0x0) [ 732.573852][T26323] __nla_validate_parse: 4 callbacks suppressed [ 732.573876][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 732.615982][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.625725][T26320] FAULT_INJECTION: forcing a failure. [ 732.625725][T26320] name failslab, interval 1, probability 0, space 0, times 0 [ 732.639024][T26320] CPU: 1 PID: 26320 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 732.646996][T26320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.657160][T26320] Call Trace: [ 732.660509][T26320] dump_stack+0x191/0x1f0 [ 732.664890][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.670812][T26320] should_fail+0xa3f/0xa50 [ 732.675274][T26320] __should_failslab+0x264/0x280 [ 732.680239][T26320] should_failslab+0x29/0x70 [ 732.684960][T26320] kmem_cache_alloc_trace+0xf7/0xd20 [ 732.690457][T26320] ? tc_new_tfilter+0x2df2/0x4ce0 [ 732.695604][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.701521][T26320] tc_new_tfilter+0x2df2/0x4ce0 [ 732.706418][T26320] ? kmsan_internal_set_origin+0x6a/0xb0 [ 732.712294][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.718294][T26320] ? tcf_block_offload_unbind+0xa50/0xa50 [ 732.724208][T26320] ? tcf_block_offload_unbind+0xa50/0xa50 [ 732.730139][T26320] rtnetlink_rcv_msg+0xcb6/0x1580 [ 732.735214][T26320] ? do_syscall_64+0xbc/0xf0 [ 732.739833][T26320] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 732.746015][T26320] ? update_stack_state+0xa12/0xb40 [ 732.751250][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.757185][T26320] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 732.763465][T26320] ? rhashtable_jhash2+0x3a9/0x4d0 [ 732.768701][T26320] ? kmsan_internal_set_origin+0x6a/0xb0 [ 732.774627][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.780567][T26320] netlink_rcv_skb+0x431/0x620 [ 732.785362][T26320] ? rtnetlink_bind+0x120/0x120 [ 732.790247][T26320] rtnetlink_rcv+0x50/0x60 [ 732.794692][T26320] netlink_unicast+0xf6c/0x1050 [ 732.799788][T26320] netlink_sendmsg+0x110f/0x1330 [ 732.805314][T26320] ? netlink_getsockopt+0x1430/0x1430 [ 732.810730][T26320] ___sys_sendmsg+0x14ff/0x1590 [ 732.815614][T26320] ? kmsan_internal_set_origin+0x6a/0xb0 [ 732.821333][T26320] ? kmsan_internal_set_origin+0x6a/0xb0 [ 732.827096][T26320] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 732.833201][T26320] ? __fget_light+0x6b1/0x710 [ 732.837941][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.843869][T26320] __sys_sendmmsg+0x53a/0xae0 [ 732.848678][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.855184][T26320] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 732.862637][T26320] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 732.868491][T26320] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 732.874446][T26320] __se_sys_sendmmsg+0xbd/0xe0 [ 732.879308][T26320] __x64_sys_sendmmsg+0x56/0x70 [ 732.884654][T26320] do_syscall_64+0xbc/0xf0 [ 732.889123][T26320] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 732.895470][T26320] RIP: 0033:0x459a29 [ 732.899583][T26320] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 732.919488][T26320] RSP: 002b:00007f2708a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 732.927926][T26320] RAX: ffffffffffffffda RBX: 00007f2708a69c90 RCX: 0000000000459a29 [ 732.936087][T26320] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 [ 732.944082][T26320] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 732.952075][T26320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a6a6d4 [ 732.960075][T26320] R13: 00000000004c722e R14: 00000000004dca80 R15: 0000000000000007 [ 733.014065][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 733.092790][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 733.212369][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 733.222245][ T31] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 853 [ 733.232619][ T31] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 733.245915][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 23:24:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 733.255224][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:24:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:49 executing program 3 (fault-call:9 fault-nth:7): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:49 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @broadcast}, 0x1) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r3 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000fea000/0x3000)=nil, 0x7000) r4 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000fea000/0x3000)=nil, 0x7000) r5 = shmat(r4, &(0x7f0000ff9000/0x2000)=nil, 0x4000) shmdt(r5) r6 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r7 = shmat(r6, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r7) r8 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r9 = shmat(r8, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r9) r10 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r11 = shmat(r10, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r11) r12 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r12, &(0x7f0000fea000/0x3000)=nil, 0x7000) r13 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r14 = shmat(r13, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r14) r15 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r16 = shmat(r15, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r16) r17 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r18 = shmat(r17, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r18) r19 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r19, &(0x7f0000fea000/0x3000)=nil, 0x7000) r20 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r20, &(0x7f0000fea000/0x3000)=nil, 0x7000) r21 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r21, &(0x7f0000fea000/0x3000)=nil, 0x7000) r22 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r22, &(0x7f0000fea000/0x3000)=nil, 0x7000) r23 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r23, &(0x7f0000fea000/0x3000)=nil, 0x7000) r24 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r25 = shmat(r24, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r25) write$binfmt_elf64(r2, &(0x7f0000001940)=ANY=[@ANYPTR64=&(0x7f0000001a80)=ANY=[], @ANYRESHEX=r25, @ANYRES16=r20, @ANYRESDEC=r21, @ANYPTR64=&(0x7f0000001bc0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r22, @ANYBLOB="e05c08bdc2c96fcac1d106b446052307c1825ce51f48be559c15c15c9559f0f960483f089edc2d7f087d503048956eb4ceaa7d717194d74aef8544665aab882c82f98389e24b4506ab95ac4d4ebc5c93f49cf8be8784a6b72283ea2c05940e8b8c4cb1d00891a8d081bfd6a2bc57ad6e7fe6948e0b73e04af782b5017f59dc2b6ed0e69302a2ff01140356597454aee0ac38b6aa23bf", @ANYRESOCT=r23, @ANYRESOCT=0x0, @ANYRESHEX, @ANYPTR64, @ANYRES64=r13], @ANYRESOCT=r0, @ANYRES64, @ANYBLOB="e7fbd35b8ef010a7e9d4c3900f94683ac9ca3e72e16bec12c9eb9cd7f6995c7a9c", @ANYBLOB="ae5e78fedf5bed6c3b404caa05628c05b98adf32950715721c7b61e2def6cbf8c28f3f56441cb26e8ed814d7c86fd60d76ae7208be2073ace037e725ea54223a60c84bd7b594c7936a7455d804414e3649dc3ddc78dbe6fffcbd176a13ac63b05aae22bdb1ca5db51fcfbde26a1b4e93bde2148c75b9246d24319471dfc109b56962b487a76d5b4c313699375e", @ANYRESOCT], 0x119) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) [ 733.302086][ T31] usb 6-1: can't set config #1, error -71 [ 733.331936][T23596] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 733.348495][ T31] usb 6-1: USB disconnect, device number 39 [ 733.411076][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.448710][T26355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 733.458714][T26355] FAULT_INJECTION: forcing a failure. [ 733.458714][T26355] name failslab, interval 1, probability 0, space 0, times 0 [ 733.473085][T26355] CPU: 0 PID: 26355 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 733.481038][T26355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.491145][T26355] Call Trace: [ 733.494517][T26355] dump_stack+0x191/0x1f0 [ 733.498921][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.504889][T26355] should_fail+0xa3f/0xa50 [ 733.509393][T26355] __should_failslab+0x264/0x280 [ 733.514400][T26355] should_failslab+0x29/0x70 [ 733.519061][T26355] kmem_cache_alloc_trace+0xf7/0xd20 [ 733.524412][T26355] ? __request_module+0x745/0x11c0 [ 733.529595][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.535563][T26355] __request_module+0x745/0x11c0 [ 733.540591][T26355] ? tcf_proto_lookup_ops+0x171/0x700 [ 733.546057][T26355] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 733.552222][T26355] tcf_proto_lookup_ops+0x171/0x700 [ 733.557501][T26355] tc_new_tfilter+0x2ebd/0x4ce0 [ 733.562496][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.568451][T26355] ? tcf_block_offload_unbind+0xa50/0xa50 [ 733.574232][T26355] ? tcf_block_offload_unbind+0xa50/0xa50 [ 733.580380][T26355] rtnetlink_rcv_msg+0xcb6/0x1580 [ 733.585491][T26355] ? do_syscall_64+0xbc/0xf0 [ 733.590176][T26355] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 733.590230][T26355] ? update_stack_state+0xa12/0xb40 [ 733.601615][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.607588][T26355] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 733.613889][T26355] ? rhashtable_jhash2+0x3a9/0x4d0 [ 733.619072][T26355] ? kmsan_internal_set_origin+0x6a/0xb0 [ 733.624775][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.630718][T26355] netlink_rcv_skb+0x431/0x620 [ 733.635525][T26355] ? rtnetlink_bind+0x120/0x120 [ 733.640410][T26355] rtnetlink_rcv+0x50/0x60 [ 733.644855][T26355] netlink_unicast+0xf6c/0x1050 [ 733.649750][T26355] netlink_sendmsg+0x110f/0x1330 [ 733.654759][T26355] ? netlink_getsockopt+0x1430/0x1430 [ 733.660153][T26355] ___sys_sendmsg+0x14ff/0x1590 [ 733.665027][T26355] ? kmsan_internal_set_origin+0x6a/0xb0 [ 733.670709][T26355] ? kmsan_internal_set_origin+0x6a/0xb0 [ 733.676370][T26355] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 733.682468][T26355] ? __fget_light+0x6b1/0x710 [ 733.687186][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.693106][T26355] __sys_sendmmsg+0x53a/0xae0 [ 733.697830][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.703750][T26355] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 733.709842][T26355] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 733.715600][T26355] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 733.721522][T26355] __se_sys_sendmmsg+0xbd/0xe0 [ 733.726314][T26355] __x64_sys_sendmmsg+0x56/0x70 [ 733.731189][T26355] do_syscall_64+0xbc/0xf0 [ 733.735668][T26355] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 733.741586][T26355] RIP: 0033:0x459a29 [ 733.745516][T26355] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 733.765143][T26355] RSP: 002b:00007f2708a69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 733.773584][T26355] RAX: ffffffffffffffda RBX: 00007f2708a69c90 RCX: 0000000000459a29 [ 733.781613][T26355] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 [ 733.789629][T26355] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 733.797813][T26355] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a6a6d4 23:24:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 733.806085][T26355] R13: 00000000004c722e R14: 00000000004dca80 R15: 0000000000000007 23:24:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:50 executing program 3 (fault-call:9 fault-nth:8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = gettid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f0000000000)) r4 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000fea000/0x3000)=nil, 0x7000) r5 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r6) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRESDEC=0x0], @ANYRESHEX=r6, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYBLOB="a8bd789e1d7e114f828508286eb0f64e63485aac801ebd0539bebb83127d7040ed7ad11e5dab908eedf3727ccafc6138f45ae226c2ac6b570c344d084ac8cb8589ad3b162a8d1b3c232f1a6a4f815911c5a262105fda04ed5122fac22fc82014d9b65b0de22f3ce88fd84d506171bd0c7f2158fa5094c6c058a39ba68d9c29dc33c35ea17398f9fe086a62a27ffe5237"]]], 0xfffffffffffffec6) r7 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000100), &(0x7f00000002c0)=0x4) recvmsg(r3, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x15) [ 733.939320][T26367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.963585][T23596] usb 3-1: Using ep0 maxpacket: 32 [ 734.113831][T23596] usb 3-1: config 0 has an invalid interface number: 175 but max is 2 [ 734.122216][T23596] usb 3-1: config 0 has an invalid interface number: 75 but max is 2 [ 734.130430][T23596] usb 3-1: config 0 has an invalid interface number: 110 but max is 2 [ 734.138812][T23596] usb 3-1: config 0 has no interface number 0 [ 734.145031][T23596] usb 3-1: config 0 has no interface number 1 [ 734.151239][T23596] usb 3-1: config 0 has no interface number 2 23:24:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x0, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 734.157508][T23596] usb 3-1: New USB device found, idVendor=05a9, idProduct=0511, bcdDevice=8d.5d [ 734.166739][T23596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.239817][T26375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 734.249672][T26375] FAULT_INJECTION: forcing a failure. [ 734.249672][T26375] name failslab, interval 1, probability 0, space 0, times 0 [ 734.262523][T26375] CPU: 0 PID: 26375 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 734.270464][T26375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.283692][T26375] Call Trace: [ 734.287062][T26375] dump_stack+0x191/0x1f0 [ 734.291552][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.297508][T26375] should_fail+0xa3f/0xa50 [ 734.301986][T26375] __should_failslab+0x264/0x280 [ 734.306948][T26375] should_failslab+0x29/0x70 [ 734.311566][T26375] __kmalloc_track_caller+0x1ad/0xea0 [ 734.316965][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.322888][T26375] ? __request_module+0x7c6/0x11c0 [ 734.328025][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.333944][T26375] ? strlen+0x51/0x90 [ 734.337944][T26375] kstrdup+0xcf/0x1a0 [ 734.341979][T26375] __request_module+0x7c6/0x11c0 [ 734.346973][T26375] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 734.353085][T26375] tcf_proto_lookup_ops+0x171/0x700 [ 734.358316][T26375] tc_new_tfilter+0x2ebd/0x4ce0 [ 734.363243][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.369157][T26375] ? tcf_block_offload_unbind+0xa50/0xa50 [ 734.374891][T26375] ? tcf_block_offload_unbind+0xa50/0xa50 [ 734.380644][T26375] rtnetlink_rcv_msg+0xcb6/0x1580 [ 734.385706][T26375] ? do_syscall_64+0xbc/0xf0 [ 734.390332][T26375] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 734.396509][T26375] ? update_stack_state+0xa12/0xb40 [ 734.401739][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.407655][T26375] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 734.413749][T26375] ? rhashtable_jhash2+0x3a9/0x4d0 [ 734.418887][T26375] ? kmsan_internal_set_origin+0x6a/0xb0 [ 734.424569][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.430490][T26375] netlink_rcv_skb+0x431/0x620 [ 734.435279][T26375] ? rtnetlink_bind+0x120/0x120 [ 734.440163][T26375] rtnetlink_rcv+0x50/0x60 [ 734.444602][T26375] netlink_unicast+0xf6c/0x1050 [ 734.449508][T26375] netlink_sendmsg+0x110f/0x1330 [ 734.454488][T26375] ? netlink_getsockopt+0x1430/0x1430 [ 734.459881][T26375] ___sys_sendmsg+0x14ff/0x1590 [ 734.464753][T26375] ? kmsan_internal_set_origin+0x6a/0xb0 [ 734.470418][T26375] ? kmsan_internal_set_origin+0x6a/0xb0 [ 734.476073][T26375] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 734.482164][T26375] ? __fget_light+0x6b1/0x710 [ 734.486868][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.492787][T26375] __sys_sendmmsg+0x53a/0xae0 [ 734.497511][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.503431][T26375] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 734.509515][T26375] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 734.515253][T26375] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 734.521177][T26375] __se_sys_sendmmsg+0xbd/0xe0 [ 734.525968][T26375] __x64_sys_sendmmsg+0x56/0x70 [ 734.530834][T26375] do_syscall_64+0xbc/0xf0 [ 734.535279][T26375] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 734.541196][T26375] RIP: 0033:0x459a29 [ 734.545112][T26375] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 734.564821][T26375] RSP: 002b:00007f2708a8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 734.573258][T26375] RAX: ffffffffffffffda RBX: 00007f2708a8ac90 RCX: 0000000000459a29 [ 734.581248][T26375] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 [ 734.589245][T26375] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 734.597669][T26375] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a8b6d4 [ 734.605826][T26375] R13: 00000000004c722e R14: 00000000004dca80 R15: 0000000000000007 [ 734.625091][T23596] usb 3-1: config 0 descriptor?? [ 734.869175][T23596] usb 3-1: USB disconnect, device number 19 [ 735.641886][ T31] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 735.892079][ T31] usb 3-1: Using ep0 maxpacket: 32 23:24:52 executing program 2: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x67, 0x4e, 0x82, 0x20, 0x5a9, 0x511, 0x8d5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaf, 0x0, 0x0, 0x14, 0x81, 0xf0}}, {{0x9, 0x4, 0x4b, 0x0, 0x0, 0x74, 0x8a, 0xf2}}, {{0x9, 0x4, 0x6e, 0x0, 0x0, 0x27, 0xb6, 0x8}}]}}]}}, 0x0) 23:24:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:52 executing program 3 (fault-call:9 fault-nth:9): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x0, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 735.962091][ T31] usb 3-1: device descriptor read/all, error -71 [ 736.095771][T26418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.127023][T26404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 736.136792][T26404] FAULT_INJECTION: forcing a failure. [ 736.136792][T26404] name failslab, interval 1, probability 0, space 0, times 0 [ 736.149576][T26404] CPU: 1 PID: 26404 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 736.157705][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.167805][T26404] Call Trace: [ 736.171193][T26404] dump_stack+0x191/0x1f0 [ 736.175598][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.181573][T26404] should_fail+0xa3f/0xa50 [ 736.186061][T26404] __should_failslab+0x264/0x280 [ 736.191037][T26404] should_failslab+0x29/0x70 [ 736.195656][T26404] kmem_cache_alloc_trace+0xf7/0xd20 [ 736.200965][T26404] ? call_usermodehelper_setup+0x167/0x590 [ 736.206790][T26404] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 736.212893][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.218811][T26404] call_usermodehelper_setup+0x167/0x590 [ 736.224468][T26404] ? __request_module+0x11c0/0x11c0 [ 736.229708][T26404] __request_module+0x930/0x11c0 [ 736.234696][T26404] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 736.240807][T26404] tcf_proto_lookup_ops+0x171/0x700 [ 736.246044][T26404] tc_new_tfilter+0x2ebd/0x4ce0 [ 736.250971][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.256894][T26404] ? tcf_block_offload_unbind+0xa50/0xa50 [ 736.262719][T26404] ? tcf_block_offload_unbind+0xa50/0xa50 [ 736.268478][T26404] rtnetlink_rcv_msg+0xcb6/0x1580 [ 736.273729][T26404] ? do_syscall_64+0xbc/0xf0 [ 736.278350][T26404] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 736.284520][T26404] ? update_stack_state+0xa12/0xb40 [ 736.289767][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.295685][T26404] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 736.301795][T26404] ? rhashtable_jhash2+0x3a9/0x4d0 [ 736.306940][T26404] ? kmsan_internal_set_origin+0x6a/0xb0 [ 736.312723][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.318659][T26404] netlink_rcv_skb+0x431/0x620 [ 736.323452][T26404] ? rtnetlink_bind+0x120/0x120 [ 736.328359][T26404] rtnetlink_rcv+0x50/0x60 [ 736.332811][T26404] netlink_unicast+0xf6c/0x1050 [ 736.337711][T26404] netlink_sendmsg+0x110f/0x1330 [ 736.342705][T26404] ? netlink_getsockopt+0x1430/0x1430 [ 736.348097][T26404] ___sys_sendmsg+0x14ff/0x1590 [ 736.352970][T26404] ? kmsan_internal_set_origin+0x6a/0xb0 [ 736.358636][T26404] ? kmsan_internal_set_origin+0x6a/0xb0 [ 736.364341][T26404] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 736.370958][T26404] ? __fget_light+0x6b1/0x710 [ 736.375673][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.381689][T26404] __sys_sendmmsg+0x53a/0xae0 [ 736.386417][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.392341][T26404] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 736.398441][T26404] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 736.404184][T26404] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 736.410104][T26404] __se_sys_sendmmsg+0xbd/0xe0 [ 736.414892][T26404] __x64_sys_sendmmsg+0x56/0x70 [ 736.419764][T26404] do_syscall_64+0xbc/0xf0 [ 736.424227][T26404] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 736.430131][T26404] RIP: 0033:0x459a29 [ 736.434047][T26404] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 736.455059][T26404] RSP: 002b:00007f2708a8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 736.463580][T26404] RAX: ffffffffffffffda RBX: 00007f2708a8ac90 RCX: 0000000000459a29 [ 736.471667][T26404] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 [ 736.479653][T26404] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 736.487640][T26404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a8b6d4 23:24:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0x80000, 0x40) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x0, 0x0, [], &(0x7f0000000140)={0x98f904}}) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) unshare(0x40000000) [ 736.495626][T26404] R13: 00000000004c722e R14: 00000000004dca80 R15: 0000000000000007 23:24:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0x0, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 736.581836][ T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd 23:24:52 executing program 3 (fault-call:9 fault-nth:10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 736.832005][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 736.897185][T26428] IPVS: ftp: loaded support on port[0] = 21 [ 736.920874][T26436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 736.953866][ T31] usb 3-1: config 0 has an invalid interface number: 175 but max is 2 [ 736.962303][ T31] usb 3-1: config 0 has an invalid interface number: 75 but max is 2 [ 736.970550][ T31] usb 3-1: config 0 has an invalid interface number: 110 but max is 2 [ 736.978968][ T31] usb 3-1: config 0 has no interface number 0 [ 736.985425][ T31] usb 3-1: config 0 has no interface number 1 [ 736.991617][ T31] usb 3-1: config 0 has no interface number 2 [ 736.998290][ T31] usb 3-1: New USB device found, idVendor=05a9, idProduct=0511, bcdDevice=8d.5d [ 737.007476][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:24:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 737.213680][ T31] usb 3-1: config 0 descriptor?? 23:24:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 737.698683][ T31] usb 3-1: USB disconnect, device number 21 [ 737.766862][T26437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.786976][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.829764][T26437] FAULT_INJECTION: forcing a failure. [ 737.829764][T26437] name failslab, interval 1, probability 0, space 0, times 0 [ 737.843080][T26437] CPU: 1 PID: 26437 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 737.851036][T26437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.861139][T26437] Call Trace: [ 737.864482][T26437] dump_stack+0x191/0x1f0 [ 737.868843][T26437] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 737.874763][T26437] should_fail+0xa3f/0xa50 [ 737.879383][T26437] __should_failslab+0x264/0x280 [ 737.884361][T26437] should_failslab+0x29/0x70 [ 737.889002][T26437] kmem_cache_alloc_node+0x103/0xe70 [ 737.894332][T26437] ? __alloc_skb+0x215/0xa10 [ 737.898975][T26437] __alloc_skb+0x215/0xa10 [ 737.903434][T26437] __tcf_chain_put+0x3c5/0xc40 [ 737.908231][T26437] tc_new_tfilter+0x164c/0x4ce0 [ 737.913180][T26437] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 737.919088][T26437] ? tcf_block_offload_unbind+0xa50/0xa50 [ 737.924921][T26437] ? tcf_block_offload_unbind+0xa50/0xa50 [ 737.930664][T26437] rtnetlink_rcv_msg+0xcb6/0x1580 [ 737.935814][T26437] ? do_syscall_64+0xbc/0xf0 [ 737.940434][T26437] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 737.946607][T26437] ? update_stack_state+0xa12/0xb40 [ 737.951833][T26437] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 737.957745][T26437] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 737.963841][T26437] ? rhashtable_jhash2+0x3a9/0x4d0 [ 737.969061][T26437] ? kmsan_internal_set_origin+0x6a/0xb0 [ 737.974728][T26437] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 737.980651][T26437] netlink_rcv_skb+0x431/0x620 [ 737.985446][T26437] ? rtnetlink_bind+0x120/0x120 [ 737.990415][T26437] rtnetlink_rcv+0x50/0x60 [ 737.994858][T26437] netlink_unicast+0xf6c/0x1050 [ 737.999751][T26437] netlink_sendmsg+0x110f/0x1330 [ 738.004742][T26437] ? netlink_getsockopt+0x1430/0x1430 [ 738.010135][T26437] ___sys_sendmsg+0x14ff/0x1590 [ 738.015019][T26437] ? kmsan_internal_set_origin+0x6a/0xb0 [ 738.020688][T26437] ? kmsan_internal_set_origin+0x6a/0xb0 [ 738.026343][T26437] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 738.032439][T26437] ? __fget_light+0x6b1/0x710 [ 738.037143][T26437] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 738.043092][T26437] __sys_sendmmsg+0x53a/0xae0 [ 738.047830][T26437] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 738.053785][T26437] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 738.059889][T26437] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 738.065648][T26437] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 738.071572][T26437] __se_sys_sendmmsg+0xbd/0xe0 [ 738.076369][T26437] __x64_sys_sendmmsg+0x56/0x70 [ 738.081327][T26437] do_syscall_64+0xbc/0xf0 [ 738.085773][T26437] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 738.091677][T26437] RIP: 0033:0x459a29 [ 738.095594][T26437] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 738.115430][T26437] RSP: 002b:00007f2708a8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 738.123881][T26437] RAX: ffffffffffffffda RBX: 00007f2708a8ac90 RCX: 0000000000459a29 [ 738.131872][T26437] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 [ 738.139858][T26437] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 738.147851][T26437] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a8b6d4 [ 738.155836][T26437] R13: 00000000004c722e R14: 00000000004dca80 R15: 0000000000000007 23:24:54 executing program 2: prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x67, 0x4e, 0x82, 0x20, 0x5a9, 0x511, 0x8d5d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaf, 0x0, 0x0, 0x14, 0x81, 0xf0}}, {{0x9, 0x4, 0x4b, 0x0, 0x0, 0x74, 0x8a, 0xf2}}, {{0x9, 0x4, 0x6e, 0x0, 0x0, 0x27, 0xb6, 0x8}}]}}]}}, 0x0) 23:24:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0x80000, 0x40) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f00000002c0)={0x7fffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x0, 0x0, [], &(0x7f0000000140)={0x98f904}}) ioctl(r2, 0xfffffbfffff3ffa7, &(0x7f0000000140)) unshare(0x40000000) 23:24:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 738.377584][T26460] IPVS: ftp: loaded support on port[0] = 21 23:24:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000800010063627100180402000404060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005cc410f3be294553000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fb418fad700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 738.601879][T23596] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 738.663485][T26473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 738.900742][T26475] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 738.912067][T23596] usb 3-1: Using ep0 maxpacket: 32 [ 739.115204][T23596] usb 3-1: config 0 has an invalid interface number: 175 but max is 2 [ 739.123596][T23596] usb 3-1: config 0 has an invalid interface number: 75 but max is 2 [ 739.131867][T23596] usb 3-1: config 0 has an invalid interface number: 110 but max is 2 [ 739.140122][T23596] usb 3-1: config 0 has no interface number 0 [ 739.146361][T23596] usb 3-1: config 0 has no interface number 1 [ 739.152592][T23596] usb 3-1: config 0 has no interface number 2 23:24:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 739.158806][T23596] usb 3-1: New USB device found, idVendor=05a9, idProduct=0511, bcdDevice=8d.5d [ 739.167977][T23596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:24:55 executing program 4: r0 = gettid() r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)="c15eb6e137f66d8ec57dad2f792edaeacf2473420a5140e7cd5d1f8e8a26e3277ab19e97cfbf5d8808fc3f9741cb2ba08dc155"}, {&(0x7f0000001400)="e8b2d6e019dae9a09a4213366407fb904c5cd8faa97e0941c1a1098d33b5d08df77a3738eb2be40a8d2cf7872c0911e5ed82c79f5e4caca929ff6b593b195e9aa753115cf43c6dd1e1ce387dac02eb029bc1c93cf9b09d9ff6d3cb856b210f72744664df67a8f30247967a9a1373e889ff5a4b54055a3323581aeae3df9e8cca36b02a02588e854dbf7c65c2694a60559c89dd8e0c20c73ed1364c52114ad1e3bd0cfc00ef659799962e4a7f2e0472b97e0ae129088765df8acc1d6ef718b6ccc3a179ba611942f77182bf27a7a79491cbbd41d93657331b83"}, {&(0x7f0000000340)="26437f56e05c5635589ce77e5a75ca0054b11f12cb4f9277dd"}, {&(0x7f0000001600)="996f2b779b680ebd383e088c7afbad37056d6a6f03331fce144c67ef89c377b626044d781623641ec88db699d7ba379e6251d75555dde5893d46606f97d6237bb67fea3a9c77aab31d80b7dbbc73dda80121001374548c4ee0a94ea733e6cdca26e0daa2d136569c4da6392b5d5a8f40a94b1f38c07305414e22a9139ef962b130feef10fb0934bf9007412ca7316cb5fbdf61bb1e122b6dae9471b701ac22ee80b1dd8c101ce96c3446e6aee6394ccd7f31494c98a12f4629acbb077422917dced2b8b4a79b5a33b0971d9a705b4e7e8fb5659c023b77a867c0bdff74ac00821fb99b3d747f4efa581f9c02c37306c19d09c01a2ed2ebb717306d98b777fef473be841fd8437d79da0346def3d98de390c57b6ff48986d4ef016e0ff829b353447fcc4a9cd9dac5dbd65800702d93f9e9e76204594d19d2ac8e0b63c950e8118832754a97602f26700ba37ffe22fc06a2313189d16b37073c267cf673fd3e09488fe35598212d7500b68a68821d87670d39163ea9cdc7a2f825a0e3a9679b51e2b3d853ed9101fcbb855a943f8204efdd28861b190cef214257a69f7854db96b567389dd57dadd3c1bff066f46f7e04bdb82e8a8efc1e852efd82e05f84d842a14bb7b46da713a48d8d8c22b06724d914486ccc278f245a8dfbec22f4a37ea6997a98443a8f05ad5891c2158efafac0fe847c0487d4d5ea8436ada9228ab2d7f7e95cd26400b5a9c314315dfe4e109423bd3eb3234bfcfb84bc2c4e6659b917b0ae347388ab55497669bcd0293a2125d603a774f2316aa5821cb08e57a448165240018948d9a3fa2e02c363ffb1cf42875332cafcb772fa75028381faf68c9675cea8ccf1e0296f4644b2f7f120344376b3ffe789b7ef42c167a5142cfad3ad6c5bb22c620eeb9030aebf779de105fea2b9082e30d31a3e431cf5f16a62fdba6fc8632393c4c00ca1f933621255fcdcb7b57badf262cb8d7d0f67234cc13aa5e4985a00c0e4986c2b6829e03befc4828dc083782773e862c636a12a1c121855d8035967d55c4eb561cf28945361597a86fb36b75766fcb341ca49c4c2b0e87a71dc108c20714109316be594e36e5832094036f4739446df557f1ca58090ccdf66db71e54e7d7ead93a1569da9b4d748cd154a36aeff53bc0a3368307c29bc40df71401bf4412cc3c41f1e73025d65e520135b2f5b3490bb2a9c9b7adafda643010b720b0d79304dfebce1775b88da1c5cf13d9d5578b51871b554aa21a57478c343fd9cc0637cca191a671641bff3bc94cf5f0b7a7ce0971e3b1189c886f28e301803a08e5ff98b4ae69cf4146768a0eba151358ecaccfd321ef0a660515e456c9a0b13cf20d7cc430778ea41d32947dffbd704cd88879092cb4bd247d640a636651471092870a4e721cae0ad2002f67d5e1e7374c47e900c076ea0e82ff70ee1bf990b35043abd7331303d3441b4a6329f669f893ff77006b34c4418bcb1f97dc1f5a39c8738d36ce2a2cc0ca469e028d3a7997573d70ca97fc44b40285b71c3655a85c5b3acac4ecc49f62a76e9bbc55b75c8f0c92cb0fa72c941feb5355dcf7ce6c02f11dd54d05cfa99c9eb92c90040be96560a75b4092b0a47d0149f8acb9064c548abc22b812d857de442cb4a7c6ab8f0cd2b08fee7c9a9bfba8ad546fd9559a7e51e760f9ae19e113b98c87ae163e2ff57015a6f8dce6897eaa0fdde6e946d4216b73a1241e515e1c79494d5f86b8294cabe629934e91ca4e4148195a291283913b918b73e5143e9b34dd5e35f3f9345442467b3c1dd133542aadb72bee181b23734d11f8a406a81f5e50cafc45c6d8b6e0191b7cddb557dff6ee6993e8da0278421ab22d82f938733dd3f3eba00391d1785e9ff0a0d0cbfdf25f941e4813a7df5c42838dbd11318ac99a2e16cf91db2ecc167ee7698910ca713f05a97d6e8963a32d25d1bdf06acb056e73f9e05715a5476f033d4ec017a2a95caf8a572260d13d5b7085660c8b3fba85d6ca015c613c59c68cc5fe95e02a7a182aabcbd85ac31f9eecc1e063dac1c1f70f65a58c5b4db75d9a1ac355b790fe1dbca85546fef79884e582b6f45c31fc4bd59d0ac31c3bbcbd0acc8968f37873b0d5819f60742f747897cb49cff5e63d8d11565029ca2b5f45036f250db0b6fa6db05fc63df22a43eafb29a5dd1279cab4bc7130f16107d0331043e7ae7cad2542b784acf6f3cab45cdd5bf45c5965128b6c59415926daf0bb13eee2402db5d748375a4ce7242458729d120d4eeb9dfe11b77a003f4af42745535404a71fc47a4a883a1060552b7267fdb20a7d6c64d5bba22fafe7571d531a2d91167231f69614f640093a90de18d4a5c1577b90e1f9376f3cb4d0c9b81ebe260871aab08dc571921d2fb9a8cc77149b799a9e08978915d4806318676765da9e93ee7473b61527d40734018f5c6b9caaafda6cf2565a1abdb0a44eac6f9ef3c588336b715d8be4f89ea35717a6f7df751d94e13747953868ac2d1e6d56dff4570455d5bbae8391fceabbeaa81c02b04eb17916116a33820bd69de633723ffae3d8002f4bcc89a8ab95b81522cc8b71673e9545cae5f672923e4cc633afa0edf01bedbeaaaabd2be5956bc4fa526c8c3f090310db6283358e3b43713b666ad3aeaae330a3164ba54da5822b52be31493df76aacb67e153536ce00e91735349dd4cb77524d53533f5f8b09a25f99281547a09a4ef57fca8a0096539b0c192ca8c546a2236983418d45a7406ca0260aa23be319a3258a27e39861aefad874e2e60c04f2ab5879d69ecf51eeec8c0a848bac5c84594f89249911b46e49a6c6cb6ec9f96fe21f9bb309a504e3152fe9cb1f793b84beab3bd362bf09eb0483717d749573b3750bb16fbfd4247487e18ce5ccc6476830a78da59307926717285f79accb021730b70f87e02a611d8cdddbf7257d9acc5c6138186f35b658c450df89863df09798be4ea6cbf421aec0e5b81838a939dbe3a4e827ce8235cf35f049a77feb6406b3d7d5c04385446945ab8f5165fd4487f5aa6dcaf8167ea6e32322f1518d2595d759ebb0dcb9d3b4f4a3db9211e9d927d0c76feebf9890e4208d50544bf429e0b804dcb801d44d8d77cf648bc9bad2958db157a4f90745e68b50d76b5e06408a39679fc4a02da8c204164adcd0a806726f002e3578be7f3935f9df24a22cb2dec64fd59e1ad91aef0f27cfab61302164f0d408d3123659d5acdd4e97e117fad6454c60ad757fdeb393d0fa8608ee2001cc0c84c73430474cdbef47578450b4bbebf6cca5799a3ba3e66383ec245c957f1987012a35a0debfc9fc7ccfccadb1063db9ed2d00fde91d707b48bf0e93d2d1ded043770f6821400c17c5bc7f4d0f1f9782388a24a93e1067520309e631647a182e0b67dc1a232aacb7eb7a353dfd73c3c23406769dde93d9bfaea46880227b60cd405e531af699f8a454c9823dc797d27b748bc454f465de72f9dc9344f73acc2a8802363d27ceb8ee3a483a64ae0338a40d0ce2ae897139499210a94560fd40a78cd4fb6e2e81e9495ad8b1ac2f68cfc2536d8503b81188df21f46c52b701c4361a5f9eb12cb5fb18546860b7d244ce84159618c976c685c2d7e0d3c431ae0bcf644435e72ed98c08b3e0920de0db5a35d31396862f23c8e663d303d0e50dfb651b55c72df8755abd2ef2b62dbc878ea53a1acf3a83e3dfa3b78c48f8327fa1799d5fec1ad8fda0e1e8cd44725757dd8030035b33eca921890d8272b6a53fb71527cb81b7104548b6dbbfd4e848953127a5fb823d37b00878bf00f7dffa59d50bda934c3ce692e4b94924e25927bb29af641c4284b9c78fa0bc8d62cc19bb3cbaa3430e0a143a66281a69c7f74bbb02a1fadb978aa67d6a483f90357efca3bda67ef52361457c945c4af3adceeb48472c58698edf232325c4db6cc28ad3f0302fa112f625e7d8aee9336de886437f0690ee1c33dc4ea4756f941e23435d600626291e9d6ea002275d2e25e7145e6b15ab940461dea922ffd6e5849898704fdb887b5bd205cf552da80b160fb6afab5dc0f3362ed21cf7ad1a589022d782bd5b87885c41291030b11e4b98a433de77bc021702cfbace7cceab77e1ab64841364525764439280b88878e081e32772812673ca9165bd6b06b8dca2f00c7a67522c4241dbac60fd01ac85487baea8d63803b238db81254a671e3d6847c8b52b068b7d16738463c4c5df455d2bda61dba13d6534c7fc4c1a7b8c693200ab2c7153d91e09c6e5bab5433545b274ce32e2b065e1ace582f1f51f3c42f0b373c04a4c05977abb7485691bc77a8e5daa9a12a66bb4bb7567ea9bc65b98b5c6a2efc11fa99e9324496b9af782bfa7ce82c146960403330bbd26efe95bc97dc77b4801af02a2709f729060926c5abf9720b80140023ee6005f9a1758344f9c6778b6c873d1782091f75b88180ff182c958052c5131611da125c7ffa5f3990f1f6cd5d1da4710465ce9ee944a85728c09ef8c3fee593775edfa62b659aefc5be462c8356df641d981cf5e32b5c3e7cf691dc8f1e607565d11163054ccb554018173e12877a1910214e66a12eb48f6faacba100cf886cb8071b7611cf64edcd7dfe28fa192c65520c67f0c916332581906e8e3c1a28b8f199c042d7abdcbe446ba54c88cb7cc3074e9227994e9c87567d30cab8b73fb79a3cd302e4ce8cc8407e129b4454f610ef7c97f8c24f1ee76027dbdee9ad3b1946a2aaeffd9053fc24fdd4d7f65043c7308566cf293743596bd1b96669058cb6b0c0f6e95b3865747c77211f4a8316fb341dc363772c63167bd84fdcc35df04cf84647e36000d77a40fa61ca57522776a7fbb1fd5da170321cee633cb30e775eb14b82b931184216b0724926fdc1b66d49347f3b9c7e3f1ba125bab1273933ef9780853ec55dfc02c77f240a0765d7d8fb2ae3a366115eaf0fcb5b54258d489c8a3d1dfb4d6d186b0e8a6114e33615aee2fd4043829a56f3f6ebb075500d81680f68673da135a3fe55825714035edf4dd6ac5fcf12f1733145ff5633b008079f51bf61e6cd0a32730bd309837a216e111fd2830f4e42c3e29bfd252f55572a4a5d6e4058a07a16b1076adaa2f4273f1bb5b5fe554430e5af2471e10303fcae5e9688b486211dfb7364a30ebd0b295e046167094d7a18b00d5a5621c34ab13e61b28b9c6c1fdce5ef73e5074bedbdf6d97e3ddc0193d82bd1f629277534b7925ba662cd1ffbf25e070f93a3e356a4389f67a87488c258dded0f227ec93afde4a5cd4e2d21b120c239e119b126386550b6f8b7f63ebf465c142f5dff76d01b7be9b20d87629ec64aeea00698b971cafe4c0159dc0640f5c5412cac832412c8ca8c0dc2a46ca81c8a1bb13c1833cc30729e002c5e4b69fd7320f5e75ee73364d4441ee80f651cdd47b4495c3d68bb2a2218c0a0250315829aa11dd7750a53038d27183a4994dfb32f905f9925204881bd7d56c55f0a6ed4a0984276f816bd1ddf30b475f8d50121ef2a1ac9be69cf7fc0b6ad28b04ed4bea452f1956dc6744ae0f9403469ee1c06e0f08c6cf1651840c22dde49845ebc3ec445174ec4f0f928d63d7b292cda92e7d550cfcb011ec6777fc2e00d32f7563f4cc9d9c9f90ce9e25ae85f5e91d0c127cc59653142c94d51f819c390b2a54d14373d1231f5748328b149fc409a563f96c09d0f902756c9f79123e4630ae4040ef966dd04424cc7e928af9884130d1e820b75b476d380e6c93513c18cfe40eae8372b406bed3f6dff1f0a1e866a24a8"}, {&(0x7f0000001500)="a019f2664c0a3cd06f028b76767a8d5780a4b163f503c6ad56dd9b73712eeda82c7eeb584069b27024587ecb2f35a6267b0f0e762dcae9cde6be02"}, {&(0x7f0000002600)="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"}, {&(0x7f0000003600)="9dbb60fb512ad5c9ab719a33db398c57cdfd7b90e0fbf93829477ff3836fa264c28fd6ca4cbb4f884cad950d9c4e8e298060c283366552b1b82931cf8488092748d5a4faeeac0ae7e8c1a13d6196392d087086467bc690da95176c911b5597945d50a48dd902302649da4ee6396f402bc6cf31fde4d7cbb0c21ab1111fbaecdacbb09eb66e59"}], 0x1, 0x0, 0x4}, 0x20008000) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x21, @multicast2, 0x4e21, 0x3, 'sh\x00', 0x8, 0x3, 0x7}, 0x2c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x800, 0x9, 0x10001, 0x80000000, 0x42}, &(0x7f00000000c0)=0x98) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x10160) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r6 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r6, &(0x7f00000036c0)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r7, 0x7e6fa733a9fa8463, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) tkill(r0, 0x15) 23:24:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 739.229127][T26486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x200, 0x8218, 0xac3f, 0x81, r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) [ 739.384511][T23596] usb 3-1: config 0 descriptor?? 23:24:55 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) [ 739.521063][T26506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 739.591096][T26506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 739.665113][T26508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 739.680829][T23596] usb 3-1: USB disconnect, device number 22 23:24:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r4, 0x0) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000280)=""/54, 0x36}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/34, 0x22}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000000400)=""/15, 0xf}, {&(0x7f0000000440)=""/11, 0xb}], 0x6) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:24:56 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x401, &(0x7f0000000000)=""/56) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) tkill(r0, 0x15) r2 = gettid() tkill(r2, 0x15) ioprio_set$pid(0x2, r2, 0xd9c5) 23:24:56 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x58, 0x6, 0x0, @dev, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @fastopen={0x22, 0x3, "9f"}, @mptcp=@remove_addr={0x1e, 0x25, 0x0, 0x100, "0bb0eaee79cd3e1ff62a69e63df6591d5733e13bf8fab2d8e1bfbd2d96a422a6fc1a"}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r6, @ANYBLOB="e5fffffff1ffffff23001800020003000000000000e3e14400000000000000f4e4b6a0f4720d58f5fe0000c400000900"/58], 0x48}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x16, 0x0, &(0x7f00007d0000)) fcntl$setflags(r7, 0x2, 0x1) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', r6}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x17}, @rand_addr="9088be465c3bd0bd9d3b53dc97897cdf", @local, 0x3f, 0x6, 0xffff, 0x100, 0x6, 0x100000, r8}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r10, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r14, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r14}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xb82c00007837fee5}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, r14, {0x2, 0x1}, {0xfff3, 0x8}, {0xd, 0x4}}, [{0x8, 0xb, 0x221}, {0x8, 0xb, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) [ 740.322263][T26533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 740.349480][T26531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:24:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:56 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) r2 = socket(0x1, 0x1, 0x53) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x2}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x3, 0x18, {0x0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x1) socket$netlink(0x10, 0x3, 0x4) tkill(r0, 0x15) 23:24:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:57 executing program 2: r0 = socket(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x4, r1}, 0x14) syz_emit_ethernet(0x5, &(0x7f0000000000)={@empty, @local, [{[], {0x8100, 0x3, 0x1, 0x3}}], {@generic={0x800e}}}, 0x0) 23:24:57 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendto$inet(r1, &(0x7f0000000000)="ee0a2fab9a3bfb4c3f431a5a3c71b11641930125368cc6e76e3aafbeefa3823270645bdf3fbc7abdcdb690730b986397bd67a4e108b52f2ded7bc6ba497646e0ba91ea48e3bcbbec5d8753fc9de5b89e419ba9bef8206cec4afbe679f2f10350b03521fee918dd7ef5b3e30f9f28c2990b326e77a679498df83daa264e9d83bf0fc624cdc157230ec3c8ff66a80a2c3f52a2c03707887cb71948ed8276bd33aa6166bdf45692ce21f8752c3d03810c737d83", 0xb2, 0x40, 0x0, 0x0) tkill(r0, 0x15) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1f, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r4, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x3, 0x18, {0x0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x10, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xf53}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000) 23:24:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dc40000000cfe47bf070") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d0000000c00001f01000000fc0002c9130001000000000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40000000011, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) syz_open_procfs(0x0, &(0x7f0000272000)) 23:24:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000400)={0x3, "9049821859368cc287335e5e78571b84df273a266a01dc14aa88bf798b151698", 0x7, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x3, 0x80) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r5, &(0x7f00000002c0)="d16c127141c965a10ce30d47e7b4de96b2431b7c4599fe8293f2ffddda7009b217edb1c39afc09e2cfcc27e48880602679b9c175d9d500abd38bf5602f5674e20cbf46e80521b5", &(0x7f0000000340)=""/124, 0x4}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 23:24:57 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:57 executing program 4: r0 = gettid() r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) recvmsg(r1, &(0x7f0000000140)={0x0, 0x353, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xd138d735b3b10ce9}, 0x100) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) 23:24:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xb, 0xa0002) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1a8) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r6, 0x8}, &(0x7f00000001c0)=0x8) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x16, 0x7a, &(0x7f0000000040)="e5ce974a79d87cc75689f1708c9962996f064f56bd3e096b39f9a6b2bd7705d80f69983daceeec5044841b20fe7e3a80e136cc140acfd92fb9c84a90fae0fa3423d766ef1019be3fcfaf7ca9c52d9d66631311626f7b8624908402284a677c26424b2a805e8c5731a7d7a176a358df4f6e9a3efc1182f85659ff"}) 23:24:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="080000000000657b8644000000004455000000708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:58 executing program 4: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r1 = shmat(r0, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r1) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff6000/0x4000)=nil) r3 = shmat(r2, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r3) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x43a002, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x2, @dev={[], 0x13}, 'ip6gre0\x00'}}, 0x1e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0xffffffffffffff3a, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x24000000}, 0xba60a153688489fc) 23:24:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000000c0)={0x4c, 0x2, 0x401}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_PROTECT={0x8}]}}}]}, 0x44}}, 0x0) 23:24:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 742.136111][T26646] netlink: 'syz-executor.5': attribute type 6 has an invalid length. 23:24:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:58 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x46) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r1, r2, 0x0, 0xfffffffd) openat(r2, &(0x7f0000000000)='./file0\x00', 0x200001, 0x77) 23:24:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x12, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket(0xa, 0x801, 0x0) dup3(r1, r0, 0x0) 23:24:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:58 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:58 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x4d8, 0xf372, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e22, 0x3, @rand_addr="bfb137b2e6e3e9dc26353d91495cd019", 0x9}, {0xa, 0x4e23, 0x26, @ipv4={[], [], @broadcast}}, 0x1, [0xff, 0x7f, 0x33, 0x400, 0x2, 0x3, 0xfffffffc, 0x9]}, 0x5c) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x400000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00003d0000003d00055b08e2b94db664517b80748e659dd479a1f8f18852ee6d5797b20f948768d71ae713b641a5630d0becb54c4070509bf8d36eff46a06eaf741e45f63374f1a84942d05dc91b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 23:24:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x40) read$rfkill(r3, &(0x7f00000002c0), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:24:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb, 0xffffffffffffffff, 0x5, 0x0, 0xe5d, 0xb4f3, 0x0, 0x400000000000004], 0x3000}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f00000001c0)={0x0, 0x8, 0xffffffff, 0x3, 0x1, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x438, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x40c, 0x2, [@TCA_BPF_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3f]}}]}}]}, 0x438}}, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) preadv(r3, &(0x7f0000000240)=[{&(0x7f00000001c0)}], 0x1, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x202, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000100)={0xd, 0x8, {0x2b, 0x1, 0xab, {0x0, 0x5}, {0x0, 0x3}, @const={0xbe, {0x20, 0x7ff8, 0x4, 0xa839}}}, {0x52, 0x3ff, 0x5, {0x18, 0xff}, {0x9, 0x4}, @cond=[{0x4, 0x9f, 0x50, 0x101, 0x8, 0x9}, {0x400, 0x0, 0xcc, 0x3ff, 0x8001, 0x1f}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 742.954867][T26691] __nla_validate_parse: 16 callbacks suppressed [ 742.954891][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:24:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 743.072134][ T3366] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 743.111426][T26691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:24:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000004d80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000080)="a7", 0x1}], 0x1}}, {{&(0x7f0000001ac0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001b00)="ed", 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioprio_get$uid(0x3, r4) getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) r8 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x1, 0x2) r9 = geteuid() getgroups(0x6, &(0x7f0000000040)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000140)=0x0) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x100, 0x0) sendmsg$nl_route(r13, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipmr_newroute={0x3c, 0x18, 0x800, 0x70bd2b, 0x25dfdbff, {0x80, 0x80, 0x10, 0x2, 0xfd, 0x0, 0x0, 0x6, 0x2100}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x87}}, @RTA_MARK={0x8, 0x10, 0x80000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0xdf367ad92d6c4552}, 0x1) setgroups(0x3, &(0x7f0000000180)=[r10, r11, r12]) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000280)={0xc0, 0x0, 0xe8, [{{0x4, 0x2, 0x1000, 0xfff, 0x401, 0x10001, {0x4, 0x0, 0x8a5d, 0x400, 0x1, 0x1, 0x0, 0xb, 0x5ba8, 0x0, 0x1, r9, r11, 0x6, 0xffff}}, {0x1, 0x1, 0x18, 0x78b, 'system.posix_acl_access\x00'}}]}, 0xc0) setgroups(0x3, &(0x7f0000000180)=[r5, r6, r7]) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [{0x2, 0x5, 0xee01}, {0x2, 0x1, r3}, {0x2, 0x3, r4}], {0x4, 0x6}, [{0x8, 0x0, r7}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x6) 23:24:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:24:59 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @sdr={0x0, 0x1}}}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0xe07000, 0x1, 0x11, r0, 0x40000) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) getsockopt$inet6_dccp_int(r1, 0x21, 0xee1cdeb63d16f9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f0000000000)="76f6871d59ada6542ad59faf22540cd23ab6db3aa5fe259c17c78db3135f4472d8827769adb6b877649e70f33941a9c5b9b1f582542931019890ef7476a4b571aa1482264283a135d5b96770e1804904fa97461f6396e8dae7e9a9b67f9ca843e563838674fdd0d664deb7a9c1e81bc62c3c85f46cf21bc3caa37cfaec84") [ 743.372659][T26706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:24:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x46) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x5}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}, [0xf8, 0x1f, 0x3f, 0x0, 0x81, 0x1, 0x38, 0x1, 0x100, 0x2, 0x7ff, 0x53, 0x1000, 0x1ede, 0x4]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) [ 743.434315][ T3366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.445504][ T3366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 743.458518][ T3366] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40 [ 743.467752][ T3366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:24:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:24:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 743.650510][ T3366] usb 5-1: config 0 descriptor?? 23:24:59 executing program 5: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x1, 0x200200) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x200, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/\x03\x00n\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffed}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x4) [ 743.760815][T26731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 744.124917][ T3366] hid-led 0003:04D8:F372.000B: item fetching failed at offset -1042373087 [ 744.134333][ T3366] hid-led: probe of 0003:04D8:F372.000B failed with error -22 [ 744.197059][T26720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 744.324504][ T3366] usb 5-1: USB disconnect, device number 9 [ 745.091831][ T3366] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 745.452175][ T3366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.463355][ T3366] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 745.476586][ T3366] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.40 [ 745.485743][ T3366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.495222][ T3366] usb 5-1: config 0 descriptor?? 23:25:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:01 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2b9, 0x80000000}, 0x108}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000010000003000002000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00 \a\x00\x00'], 0x20}}, 0x0) r1 = semget(0x0, 0x1, 0x122) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x9f10990b0a33757f, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000940)=0xe8) sendto$packet(r2, &(0x7f0000000740)="56a14ba1eaf99e25d095f6abee3777c9e6e7a9a542b136d0ec07b1d9b928a2381c4875444f2475d88a4fdca803206176554334937a939cfcc023be94dd9c627c01e48eac857ef94412dbb025f180e5d507076ccf55c7b65b9a117ea1a8c2c4286753f0f3d02037c38c512a3520375a92bd7e51cee759f6f4c35a3eaae9875ad2941b891dcfe9843fba8bdcef8aaf8a6797571202b7913fb2e38ad3860f69d152b1d9b599eaa6bb9fa17235213e4b9ba260f30ca820e73f94a5762bcb35b54f689b1171b1d6995d77bdc786ca35e1ba46513bbc2de2e3f51ee77c4288a70408904ae2c669f4499f7b5a5f03a1d19fd1c2c0a9", 0xf2, 0x8000, &(0x7f0000000980)={0x11, 0x1b, r4, 0x1, 0x7, 0x6, @dev={[], 0x2a}}, 0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x180, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x45}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff5b15}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x333e}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x465f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x16a3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) semctl$SEM_INFO(r1, 0x2, 0x13, &(0x7f00000002c0)=""/167) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000640)={{0x1, 0x0, 0x1f, 0x2, 0x80}, 0x80, 0x8, 'id1\x00', 'timer1\x00', 0x0, 0x7b16, 0x3, 0x80000001, 0x6}) rt_sigaction(0x3e, &(0x7f0000000180)={&(0x7f0000000040)="c4c24d36b9c2000000df9304000000660f3a0d1405000000003c43887f00440fd95500c401a91238f36fd3326698f266f04631a886000000", {0x194}, 0x4c74c0d68b1d83f8, &(0x7f0000000140)="c423b120cd002e676526d9f478ff470f1fd3c4c275a8b80500000041d0d9f33e44c30b64bf09467c653e2e0f1b741f00"}, &(0x7f0000000240)={&(0x7f00000001c0)="c402e9dc91195a000093f2a7c4e27d344dd0f3420f01e8c4e2fd2510c4418958f96690c481805401410d00000000", {}, 0x0, &(0x7f0000000200)="c4c2fdabb1f77f0000660f616f50c4227918e5f20f1bec430f025a042e46d9fb410fb1b74a150000362e65f340d818c462a59d0ef00818"}, 0x8, &(0x7f0000000280)) 23:25:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) shmdt(0x0) [ 745.884083][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 745.915147][ T3366] usbhid 5-1:0.0: can't add hid device: -71 [ 745.921424][ T3366] usbhid: probe of 5-1:0.0 failed with error -71 [ 745.982284][ T3366] usb 5-1: USB disconnect, device number 10 23:25:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 746.088927][T26755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = socket$inet6(0xa, 0x4, 0xf8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r4, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x0) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 23:25:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000680)='/dev/adsp#\x00', 0xa7, 0xc00) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000001b40)={0x1}, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x46) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099b7) sendfile(r6, r7, 0x0, 0xfffffffd) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000580)={0x6, 0x0, [{0x6000, 0x35, &(0x7f0000000280)=""/53}, {0xd000, 0x1000, &(0x7f0000000b40)=""/4096}, {0x0, 0x9b, &(0x7f00000002c0)=""/155}, {0x2000, 0xf4, &(0x7f0000000380)=""/244}, {0x8d86b31be9ff9797, 0x71, &(0x7f0000000480)=""/113}, {0x1000, 0x74, &(0x7f0000000500)=""/116}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x4, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 23:25:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) ftruncate(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(0xffffffffffffffff) read$rfkill(0xffffffffffffffff, &(0x7f00000000c0), 0x8) recvfrom$unix(0xffffffffffffffff, &(0x7f00000002c0)=""/129, 0x81, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r6 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x2, 0xa2741bbc0bc58803}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2}, 0x0) getrusage(0x0, &(0x7f0000000440)) 23:25:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) link(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, &(0x7f0000000040)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") getpeername(r3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x0, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="86100001", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={r7, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x100) socket$inet6_sctp(0xa, 0x10000000005, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x7ff, 0x4, 0x1, 0x40, 0x1, 0x0, 0x427, {0x0, @in6={{0xa, 0x4e24, 0x800, @ipv4={[], [], @local}, 0x7ff}}, 0x0, 0x80ff, 0x3f, 0x5, 0x3}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000780)={r5, 0x2, 0x81, 0xca4, 0x0, 0x2000, 0x0, 0x0, {r8, @in6={{0xa, 0x0, 0x800, @local, 0x9}}, 0x800, 0x0, 0x0, 0x6}}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) socket$inet(0x10, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 23:25:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x7f, 0x1c000) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000002c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 746.731343][T26800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 746.947279][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:03 executing program 2: mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x1000000, 0x4d031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="3ac3bae1ffa46dc8795e00000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={r1, 0x200, 0x30, 0x8000, 0x1}, &(0x7f0000000040)=0x18) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e23, @loopback}}, 0xfe8, 0xbbec, 0x80000000, 0xffff, 0x40}, 0x98) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x46) r4 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000300)=0x3000000, 0x4) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000690000/0x2000)=nil, 0x2000}, 0x1}) r5 = dup(r3) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0xfffffffd) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000140)={0x4, 0x0, 0x3011, 0x4, 0x7fffffff, 0x0, 0xc91, 0x1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x7a, @rand_addr="4df3128131d469ac0c8e7bc7a8d7cb46", 0x9}], 0x2c) 23:25:03 executing program 5: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8001) syz_emit_ethernet(0x83, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b004d0600fe800000000000000000000000000000fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d0000000907800001d037b55ff420f92789c0b7ba6f17dc72d66bc62a1b25d570e5490ba3a2d8e8f31cc060600aefe350d3e30737669d91879f87f9de2042ad5c2"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x81, 0x101440) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x0, 0x6, 0x9, 0x200, 0xfff, 0x2}) 23:25:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x46) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0xfffffffd) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r8, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[r7, r8, r2, r1], 0x4) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000140), 0x332, 0x0) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x309000, 0x0) setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f00000002c0)=0xfffffffc, 0x4) 23:25:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:03 executing program 2: r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000fea000/0x3000)=nil, 0x7000) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000fea000/0x3000)=nil, 0x7000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYPTR, @ANYRESHEX=r0, @ANYPTR64=&(0x7f00000005c0)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRESDEC=r1], @ANYPTR64, @ANYBLOB], &(0x7f00000004c0)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248, 0x0, 0x268, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x5, 0x4, 0x0, 0xec}, 0xfffffcb4}, 0x70) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2200) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x3a442, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000280)=""/127) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x46) r5 = dup(0xffffffffffffffff) r6 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x2, 0x200000) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099b7) r8 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x400, 0x10000) bind$alg(r8, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) sendfile(r5, r7, 0x0, 0xfffffffd) write$FUSE_BMAP(r7, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0x8, {0xe0000000000}}, 0x18) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000300)={'bcsh0\x00', 0x9b}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe101}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) 23:25:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 747.447494][T26847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:03 executing program 5: lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x400, 0x1]}, &(0x7f0000000240)=0x8) socket(0x10, 0x802, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, [], 0x2a}, 0x2}, {0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0xffffffffffffffff, 0xfff}}, 0x48) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x22, &(0x7f0000000000), 0x10) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @multicast2}, {0x1, @dev={[], 0x25}}, 0x28, {0x2, 0x4e24, @loopback}, 'bond_slave_1\x00'}) 23:25:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071105300000000009500000100000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) fcntl$getown(r1, 0x9) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7ff) 23:25:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071105300000000009500000100000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) fcntl$getown(r1, 0x9) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x7ff) 23:25:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x8, @empty, 0x8}, {0xa, 0x4e21, 0x81, @loopback, 0xeb2}, 0x1f, [0x9, 0x9, 0x5, 0x9, 0x3, 0x1000, 0x1, 0xff]}, 0x5c) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:04 executing program 2: r0 = socket$inet(0x2, 0x3, 0x200000000019) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1}, 0x8) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x44) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in6}}}, 0xe8) close(r0) [ 748.099313][T26879] __nla_validate_parse: 2 callbacks suppressed [ 748.099336][T26879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 748.202479][T26886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 748.257356][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 23:25:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) accept(r3, &(0x7f0000000d40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000dc0)=0x80) getresuid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioprio_get$uid(0x3, r5) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000e00)={{{@in6=@local, @in=@broadcast, 0x4e20, 0x6, 0x4e22, 0x7, 0x2, 0x0, 0xab9983cd7c98ac26, 0x85029444d9119289, r4, r5}, {0x3, 0x7, 0x83, 0x7fffffff, 0xf47, 0x5, 0x8, 0x5}, {0x1, 0x3, 0x8001, 0x10000}, 0x1, 0x6e6bb5, 0x3, 0x3}, {{@in=@multicast2, 0x4d2, 0x4d}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x2a}, 0x3503, 0x0, 0x1, 0x79, 0x3, 0x0, 0x3ff}}, 0xe8) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 23:25:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x8, @empty, 0x8}, {0xa, 0x4e21, 0x81, @loopback, 0xeb2}, 0x1f, [0x9, 0x9, 0x5, 0x9, 0x3, 0x1000, 0x1, 0xff]}, 0x5c) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000b", 0x10) recvmmsg(r7, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) [ 748.618304][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 748.796690][T26922] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x8, @empty, 0x8}, {0xa, 0x4e21, 0x81, @loopback, 0xeb2}, 0x1f, [0x9, 0x9, 0x5, 0x9, 0x3, 0x1000, 0x1, 0xff]}, 0x5c) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000b", 0x10) recvmmsg(r7, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 23:25:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x80) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f00000002c0)) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x70bd28, 0x0, {0x0, r9}}, 0x10}}, 0x0) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc0000002d00000227bd7040ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="f1ff1400f2ff1b0009000a0008000500814e00000c000100726f757465000000840002000800030094000000780006007400050000000c000100766c616e000000004000020008000400810000001c000200000000007f00000000000000090000000800000003000000080003004705000008000600010000000800030041070000200006000c4a15bd1f454d1409b89f7ea455add1a4f2440c2ec9649e3a0000000000"], 0xbc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140), 0x332, 0x0) 23:25:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000b", 0x10) recvmmsg(r7, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 23:25:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x8, @empty, 0x8}, {0xa, 0x4e21, 0x81, @loopback, 0xeb2}, 0x1f, [0x9, 0x9, 0x5, 0x9, 0x3, 0x1000, 0x1, 0xff]}, 0x5c) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 749.320320][T26938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 749.526634][T26952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 749.583288][T26956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000b", 0x10) recvmmsg(r7, &(0x7f00000062c0)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) 23:25:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44040900000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369052cf3d40fe6ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="d3ab27191a01002356ba602dff05000b", 0x10) 23:25:06 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 749.961204][T26971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:06 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) 23:25:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffef, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:06 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 750.389996][T27000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) r5 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000fea000/0x3000)=nil, 0x7000) dup(r4) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000440)={0x0, @capture={0x0, 0x1, {0x7, 0x1000}, 0x3f2}}) write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRESOCT=0x0, @ANYRES64=0x0], 0x23) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x6, 0x80, 0x0, 0x7}, {0x9, 0x4, 0x81, 0x7fff}]}) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 23:25:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) 23:25:06 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$alg(0x26, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0xa4f6f7cc70f47533, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000380)={0x7, 0x1b, 0x2}, 0x7) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) r6 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r6, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f0000000300)="75756faefc02719868b7d538f70fbde78d17a845e3d5cb61df38a36bb75c4f5c2a919c754c784b2b3a45") write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f00000002c0)={0x8000200a}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00,\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 23:25:06 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:07 executing program 5: socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x20c003) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000280)) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 23:25:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 23:25:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 23:25:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, 0x0}, 0x0) 23:25:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000280)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, 0x0}, 0x0) 23:25:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, 0x0}, 0x0) 23:25:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000180)={0x6, 0x3, 0xd06, 0x7fff, 0x8, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:08 executing program 3: bind$rds(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b600006d50089f9f800e993acc597d215698952eb3ec930a7177f0efb8eb7604a041a9e5f9209b145edff37271fecb750ff71b8930304291e5300b7217ec78", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0xd13, 0x3066c1596731ab64) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)}, 0x0) 23:25:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x400200) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000340)) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028006e7401040000e1170002de1300010022b6000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000e9746a13ad1bb5ef000000c8f29245c18b5b597b8957a0c7c36dea8bac9142"], 0x48}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x332, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000280)={0x200, "37c7337afd27024c89e51ab20d7be92baacae3a23b834acb189a2c5697806926", 0x2, 0x0, 0x1, 0x100, 0x1000000, 0x2}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x46) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099b7) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$VFIO_SET_IOMMU(r6, 0x3b66, 0x4) 23:25:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)}, 0x0) 23:25:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 753.605875][T27181] __nla_validate_parse: 9 callbacks suppressed [ 753.605899][T27181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)}, 0x0) 23:25:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 753.723960][T27188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[]}}, 0x0) 23:25:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000000000000000000000000000004e0000dcb8ea33e64b4b72000040868e3126f0f3008d1c44d6766b1744600b37", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_CBQ_RATE={0xffffff86, 0x5, {0x22, 0x0, 0xfff, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000cdca59917383ab14a4890e000000f6fff0ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0xfffffffffffffc8b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 754.005988][T27201] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[]}}, 0x0) 23:25:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(0x0, 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f00007d0000)) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, &(0x7f0000000240)=0xfffffffffffffc8b) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r3, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[]}}, 0x0) 23:25:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000440)=0x1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getresuid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioprio_get$uid(0x3, r6) getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0xffffffffffffffea, 0x6, {0x1, 0x1, 0x0, 0x20, 0x9, 0x1, {0x4, 0xc6, 0x6, 0xfffffffffffffff8, 0x0, 0x401, 0x9, 0x1ffe000, 0x3, 0x4, 0xfffeffff, r6, r7, 0xf, 0x5}}}, 0x90) read(r5, &(0x7f0000000280)=""/41, 0x29) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 23:25:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(0x0, 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:10 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f00007d0000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB]}}, 0x0) 23:25:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:10 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x46) r1 = dup(r0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000002180)={'bond_slave_0\x00', {0x2, 0x4e24, @loopback}}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000040)={0xffffffffffffff48, 0x0, 0x10000, 0x1}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) sync_file_range(r5, 0x5, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r4, 0x3}) ftruncate(r2, 0x10099b7) sendfile(r1, r2, 0x0, 0xfffffffd) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000100)={0x1, 0x0, 0x2080, {0x3000, 0xd000, 0x1}, [], "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", "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"}) unshare(0x28020400) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, &(0x7f00000000c0)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0x7fff, 0x4) 23:25:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB]}}, 0x0) 23:25:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(0x0, 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 754.779827][T27250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:10 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r2, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB]}}, 0x0) 23:25:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:11 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000280)={0x1fe0, 0x5, 0x5}) 23:25:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000"], 0x4c}}, 0x0) 23:25:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xd919781, 0x3}, 0x10}, 0x70) r0 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000000, 0x20010, r0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x1, 0x4, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) getsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) [ 755.336123][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f01d866b9800000c00f326635000100000f30ded90ff49500300fc7b671070f20d86635080000000f22d8ba6100ec0f001f633ff30f09", 0x37}], 0x1, 0x5a, 0x0, 0xfe) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x807}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="b4dcb90d5e0bcfe47bf070") r4 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1, 0x400000) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000100)=0x5) perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:25:11 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000"], 0x4c}}, 0x0) [ 755.519047][T27298] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 755.664133][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000"], 0x4c}}, 0x0) 23:25:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x7, 0x20400) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x46) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0xfffffffd) fsconfig$FSCONFIG_SET_PATH_EMPTY(r3, 0x4, &(0x7f00000002c0)='cbq\x00', &(0x7f0000000300)='./file0\x00', r6) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x300}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x18, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 23:25:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd000000000500"], 0x72}}, 0x0) 23:25:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x222000, 0x0) r6 = gettid() tkill(r6, 0x15) r7 = getpgid(r6) write$P9_RGETLOCK(r5, &(0x7f00000002c0)={0x22, 0x37, 0x1, {0xab712826b2fa18ba, 0xfffffffffffffffa, 0x9, r7, 0x4, 'cbq\x00'}}, 0x22) 23:25:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd000000000500"], 0x72}}, 0x0) 23:25:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 756.369673][T27346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00@\x00', 0x1801}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x8, 0x9, @rand_addr="d71d6a520113bd9ead4e4e7e08542c72", 0x5}, 0xd9) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xff, 0x1) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x4, 0x101, 0xfff, 0x7fff, 0x4}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={r3, 0x9, 0x1a, "a522e8b8b40231c2b701b81c6cadc255b51f62791ee9b14d23f8"}, 0x22) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\r\xc2\x00\t\x00\x00\x00\x80\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x20) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x46) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099b7) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x1, './bus\x00'}, 0x6e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1ad9562, @remote, 0x1}, {0xa, 0x4e24, 0x8001, @local, 0x9}, 0xffffffffffffffff, 0x4}}, 0x48) 23:25:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd000000000500"], 0x72}}, 0x0) 23:25:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 756.580267][T27366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:25:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000"], 0x85}}, 0x0) 23:25:12 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000003b00576400"], 0x10}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0xa2282, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002001300e9ff0000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a000000008d0000000000000000000017000000000000000000000000000061dff290bcb4f3c3e4ccbbd1762d29f10702aba33704a0f176637a7de90f414caeb37cea8c73c07cadf4e08911ea60c8cc3d382090e9ffe6859478a4937633193f5a63e1d1dd5ae595"], 0xc8}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) 23:25:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000"], 0x85}}, 0x0) 23:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(0x0, &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x194, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xc, 0x1, 'choke\x00'}, {0x164, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x401}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffffffff, 0x1, 0x101, 0xc, 0xc, 0xd, 0x4}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1000, 0x1, 0x8001, 0x0, 0x6, 0xf, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x80000001}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x5, 0x400, 0x5, 0x3, 0x15, 0xb, 0x8}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x194}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="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"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000"], 0x85}}, 0x0) 23:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(0x0, &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 759.476257][T27410] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(0x0, &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0xffffffffffffffb4, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0xea, 0x10, 0x325, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x28, 0x12, @bond={{0xffffffffffffffef, 0x1, 'bond\x00'}, {0x0, 0x2, [@IFLA_BOND_MIIMON={0x0, 0x3, 0x7}]}}}]}, 0x28e}, 0x1, 0x0, 0x0, 0xa39b2a56e43ed518}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r8}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', r8}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r13}}, 0x24}}, 0x0) r14 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r14, 0x6, 0x15, 0x0, 0x46) r15 = dup(r14) r16 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r16, 0x10099b7) sendfile(r15, r16, 0x0, 0xfffffffd) accept4$packet(r16, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x3652d5d968cfb0ed) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltclass={0x34, 0x29, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, r17, {0x0, 0x7}, {0x6, 0xfff1}, {0x9, 0x10}}, [@TCA_RATE={0x8, 0x5, {0x3, 0x7f}}, @TCA_RATE={0x8, 0x5, {0x6, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r18 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r18, &(0x7f0000000140), 0x332, 0x0) 23:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000"], 0x8f}}, 0x0) [ 759.833570][T27433] netlink: 162 bytes leftover after parsing attributes in process `syz-executor.3'. [ 759.843158][T27433] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x222000, 0x0) r6 = gettid() tkill(r6, 0x15) r7 = getpgid(r6) write$P9_RGETLOCK(r5, &(0x7f00000002c0)={0x22, 0x37, 0x1, {0xab712826b2fa18ba, 0xfffffffffffffffa, 0x9, r7, 0x4, 'cbq\x00'}}, 0x22) 23:25:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(0x0, &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0xd0f, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000340)={0x73, 0x0, [0x9, 0x0, 0x3, 0x757d]}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x3, 0x80807, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept4$inet(r6, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10, 0x80c00) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000"], 0x8f}}, 0x0) [ 760.112806][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 23:25:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000c8ab10342db24c1284ce44aebeabf4336f31a3dc8e45f4223071be847062c05756a9b169bd964d60470816f0f0db88786d03b52d8f02b644"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000"], 0x8f}}, 0x0) 23:25:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100000000"], 0x94}}, 0x0) [ 760.514824][T27481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:16 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100000000"], 0x94}}, 0x0) 23:25:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) prctl$PR_GET_FP_MODE(0x2e) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100000000"], 0x94}}, 0x0) [ 763.161189][T27512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\t\x00\x00\x00\x00k6'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff020000000000000000000000400001000000000000"], 0x96}}, 0x0) 23:25:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x46) dup(r5) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r7, 0x4, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={r4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r8, 0xf, 0x3ff}, 0x8) dup2(r1, r0) r9 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000480)={{0xa, 0x4e23, 0x40, @mcast2, 0xb84d}, {0xa, 0x4e21, 0xffff, @empty, 0x7fff}, 0x0, [0x1000, 0xb5c, 0x0, 0x6, 0x2, 0x7, 0x3, 0x9]}, 0x5c) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvfrom$packet(r9, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r11, 0x203, 0x70bd25, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 763.432981][T27524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:25:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff020000000000000000000000400001000000000000"], 0x96}}, 0x0) 23:25:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 763.560343][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x46) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000340)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB="b000080000000000"], 0x48}}, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000280)=@v1={0x0, @aes256, 0x0, "b1c1eefd1a8339d5"}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x5, 0x4) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x0, 0x2) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x610040, 0x0) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f0000000300)) 23:25:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff020000000000000000000000400001000000000000"], 0x96}}, 0x0) 23:25:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) 23:25:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100000000000000"], 0x97}}, 0x0) 23:25:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 764.145970][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 764.234550][T27538] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:25:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100000000000000"], 0x97}}, 0x0) 23:25:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x129040, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000002c0)=r6) 23:25:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100000000000000"], 0x97}}, 0x0) 23:25:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 764.589271][T27605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 764.715233][T27605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:20 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 764.915841][T27631] FAULT_INJECTION: forcing a failure. [ 764.915841][T27631] name failslab, interval 1, probability 0, space 0, times 0 [ 764.928937][T27631] CPU: 0 PID: 27631 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 764.936885][T27631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.946992][T27631] Call Trace: [ 764.950365][T27631] dump_stack+0x191/0x1f0 [ 764.954767][T27631] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 764.960728][T27631] should_fail+0xa3f/0xa50 [ 764.965325][T27631] __should_failslab+0x264/0x280 [ 764.970334][T27631] should_failslab+0x29/0x70 [ 764.974993][T27631] kmem_cache_alloc_node+0x103/0xe70 [ 764.980358][T27631] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 764.986495][T27631] ? __alloc_skb+0x215/0xa10 [ 764.991172][T27631] __alloc_skb+0x215/0xa10 [ 764.995669][T27631] pfkey_sendmsg+0x27c/0x1cd0 [ 765.000403][T27631] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 765.006333][T27631] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 765.012424][T27631] ? aa_sk_perm+0x730/0xaf0 [ 765.016974][T27631] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 765.022902][T27631] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 765.028993][T27631] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 765.034921][T27631] ? pfkey_release+0x530/0x530 [ 765.039711][T27631] ___sys_sendmsg+0x14ff/0x1590 [ 765.044623][T27631] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 765.050762][T27631] ? __fget_light+0x6b1/0x710 [ 765.055496][T27631] ? kmsan_internal_set_origin+0x6a/0xb0 [ 765.061174][T27631] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 765.067118][T27631] __se_sys_sendmsg+0x305/0x460 [ 765.072037][T27631] __x64_sys_sendmsg+0x4a/0x70 [ 765.076843][T27631] do_syscall_64+0xbc/0xf0 [ 765.081316][T27631] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 765.087238][T27631] RIP: 0033:0x459a29 [ 765.091157][T27631] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 23:25:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x7}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 765.110780][T27631] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.119218][T27631] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 765.127215][T27631] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 765.135199][T27631] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 765.143188][T27631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 765.151184][T27631] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 765.231566][T27635] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c00"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:21 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3499c00b}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x66f4, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200), 0x8) 23:25:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 765.284760][T27640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:21 executing program 5 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 765.358866][T27635] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:21 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x66, 0x78, 0xb6, 0x8, 0x5ac, 0x238, 0xb3e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x44, 0x0, 0x1, 0x3, 0xc7, 0x2, 0x0, [], [{{0x9, 0x5, 0x8f}}]}}]}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f00000000c0)=0x425) 23:25:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0xfffffffd) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000280)=0xff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 23:25:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001002182c7826ab679d1a6dd49d778a360d5f0a6248e8c8ff5124ab8724", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000280)) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f0000008ec3fb84d663bbf98f88edd249be659c6ac6cb81c64729e1683e458efd177f22387e11a467ede6212f51f167ab7a87a014a4059623732893a9510f01ca4bb6a1009c2ce0baf2494b791c3540"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x2, 0x0) bind$netlink(r5, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfe, 0x204}, 0xc) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) getsockopt(r6, 0x7fff, 0x8, &(0x7f00000002c0)=""/78, &(0x7f0000000340)=0x4e) [ 765.705299][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 765.744203][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c00"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 765.841921][T23596] usb 5-1: new high-speed USB device number 11 using dummy_hcd 23:25:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$reject(0x13, r1, 0x1, 0x4, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = gettid() tkill(r4, 0x15) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000380)={0x880f351df44bd927, 0x2, 0x6, 0x1f, r4}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665740b68000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x8) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0xd02, 0x0) accept4$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c, 0x1000) r7 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000000440)=0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000f6fff1ff0c0001d0786369ab6db14663708d9800"], 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 23:25:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 766.054127][T27690] FAULT_INJECTION: forcing a failure. [ 766.054127][T27690] name failslab, interval 1, probability 0, space 0, times 0 [ 766.067158][T27690] CPU: 0 PID: 27690 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 766.075098][T27690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.085200][T27690] Call Trace: [ 766.088661][T27690] dump_stack+0x191/0x1f0 [ 766.093068][T27690] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.099134][T27690] should_fail+0xa3f/0xa50 [ 766.103628][T27690] __should_failslab+0x264/0x280 [ 766.108629][T27690] should_failslab+0x29/0x70 [ 766.113291][T27690] __kmalloc_node_track_caller+0x1cd/0x1320 [ 766.119239][T27690] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 766.125373][T27690] ? kmem_cache_alloc_node+0x1b6/0xe70 [ 766.130911][T27690] ? pfkey_sendmsg+0x27c/0x1cd0 [ 766.135845][T27690] ? pfkey_sendmsg+0x27c/0x1cd0 [ 766.140944][T27690] __alloc_skb+0x306/0xa10 [ 766.145423][T27690] ? pfkey_sendmsg+0x27c/0x1cd0 23:25:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c00"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 766.150383][T27690] pfkey_sendmsg+0x27c/0x1cd0 [ 766.155143][T27690] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.164420][T27690] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 766.170561][T27690] ? aa_sk_perm+0x730/0xaf0 [ 766.175162][T27690] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.181141][T27690] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 766.187303][T27690] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.193982][T27690] ? pfkey_release+0x530/0x530 [ 766.198836][T27690] ___sys_sendmsg+0x14ff/0x1590 [ 766.203770][T27690] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 766.209945][T27690] ? __fget_light+0x6b1/0x710 [ 766.214771][T27690] ? kmsan_internal_set_origin+0x6a/0xb0 [ 766.220444][T27690] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.226458][T27690] __se_sys_sendmsg+0x305/0x460 [ 766.231352][T27690] __x64_sys_sendmsg+0x4a/0x70 [ 766.236143][T27690] do_syscall_64+0xbc/0xf0 [ 766.240592][T27690] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.246498][T27690] RIP: 0033:0x459a29 [ 766.250420][T27690] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.270489][T27690] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.279022][T27690] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 766.287022][T27690] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 766.295019][T27690] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 766.303017][T27690] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 766.311096][T27690] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 [ 766.320098][T23596] usb 5-1: Using ep0 maxpacket: 8 [ 766.442888][T23596] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 766.451186][T23596] usb 5-1: config 0 has no interface number 0 [ 766.458342][T23596] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= b.3e [ 766.467556][T23596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 23:25:22 executing program 5 (fault-call:1 fault-nth:2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 766.504135][T23596] usb 5-1: config 0 descriptor?? [ 766.549959][T23596] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.68/input/input11 [ 766.603944][T27709] FAULT_INJECTION: forcing a failure. [ 766.603944][T27709] name failslab, interval 1, probability 0, space 0, times 0 [ 766.616995][T27709] CPU: 0 PID: 27709 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 766.624945][T27709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.635049][T27709] Call Trace: [ 766.638413][T27709] dump_stack+0x191/0x1f0 [ 766.642808][T27709] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.648770][T27709] should_fail+0xa3f/0xa50 [ 766.653532][T27709] __should_failslab+0x264/0x280 [ 766.658539][T27709] should_failslab+0x29/0x70 [ 766.663203][T27709] kmem_cache_alloc+0xd6/0xd10 [ 766.668030][T27709] ? skb_clone+0x326/0x5d0 [ 766.672512][T27709] ? _copy_from_iter_full+0x1080/0x1300 [ 766.678149][T27709] skb_clone+0x326/0x5d0 [ 766.682477][T27709] pfkey_sendmsg+0x733/0x1cd0 [ 766.687387][T27709] ? aa_sk_perm+0x730/0xaf0 [ 766.691976][T27709] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.697895][T27709] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 766.703990][T27709] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.709904][T27709] ? pfkey_release+0x530/0x530 [ 766.714685][T27709] ___sys_sendmsg+0x14ff/0x1590 [ 766.719555][T27709] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 766.725670][T27709] ? __fget_light+0x6b1/0x710 [ 766.730362][T27709] ? kmsan_internal_set_origin+0x6a/0xb0 [ 766.736024][T27709] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 766.742065][T27709] __se_sys_sendmsg+0x305/0x460 [ 766.747679][T27709] __x64_sys_sendmsg+0x4a/0x70 [ 766.752468][T27709] do_syscall_64+0xbc/0xf0 [ 766.756915][T27709] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 766.762842][T27709] RIP: 0033:0x459a29 [ 766.766758][T27709] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.786657][T27709] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.795277][T27709] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 766.803356][T27709] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 766.811522][T27709] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 766.819513][T27709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 766.827510][T27709] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 [ 766.842961][ T3366] usb 5-1: USB disconnect, device number 11 [ 767.621906][T23596] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 767.871805][T23596] usb 5-1: Using ep0 maxpacket: 8 [ 767.992186][T23596] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 768.000457][T23596] usb 5-1: config 0 has no interface number 0 [ 768.006766][T23596] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= b.3e [ 768.015919][T23596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.025772][T23596] usb 5-1: config 0 descriptor?? [ 768.067216][T23596] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.68/input/input12 [ 768.263602][ T3366] usb 5-1: USB disconnect, device number 12 23:25:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6d"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:24 executing program 5 (fault-call:1 fault-nth:3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 768.630465][T27717] FAULT_INJECTION: forcing a failure. [ 768.630465][T27717] name failslab, interval 1, probability 0, space 0, times 0 [ 768.643371][T27717] CPU: 1 PID: 27717 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 768.651319][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.661451][T27717] Call Trace: [ 768.664811][T27717] dump_stack+0x191/0x1f0 [ 768.669220][T27717] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 768.675184][T27717] should_fail+0xa3f/0xa50 [ 768.679683][T27717] __should_failslab+0x264/0x280 [ 768.684695][T27717] should_failslab+0x29/0x70 [ 768.689352][T27717] kmem_cache_alloc+0xd6/0xd10 [ 768.694244][T27717] ? xfrm_state_alloc+0x70/0x470 [ 768.699322][T27717] xfrm_state_alloc+0x70/0x470 [ 768.704170][T27717] pfkey_add+0xade/0x3b20 [ 768.708586][T27717] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 768.714537][T27717] ? pfkey_getspi+0x1680/0x1680 [ 768.719442][T27717] pfkey_sendmsg+0x15ab/0x1cd0 [ 768.724416][T27717] ? pfkey_release+0x530/0x530 [ 768.729260][T27717] ___sys_sendmsg+0x14ff/0x1590 [ 768.734209][T27717] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 768.740386][T27717] ? __fget_light+0x6b1/0x710 [ 768.745127][T27717] ? kmsan_internal_set_origin+0x6a/0xb0 [ 768.750838][T27717] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 768.756800][T27717] __se_sys_sendmsg+0x305/0x460 [ 768.761734][T27717] __x64_sys_sendmsg+0x4a/0x70 [ 768.766559][T27717] do_syscall_64+0xbc/0xf0 [ 768.771041][T27717] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 768.776983][T27717] RIP: 0033:0x459a29 [ 768.780937][T27717] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 768.800597][T27717] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.809080][T27717] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 768.817106][T27717] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 23:25:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6d"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) [ 768.825128][T27717] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 768.833238][T27717] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 768.841274][T27717] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf323]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:25 executing program 5 (fault-call:1 fault-nth:4): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x8}}]}, &(0x7f0000000180)=0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x802, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x85}, &(0x7f0000000080)=0x8) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000140)={{0x6, 0x8}, 0x20}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x0, &(0x7f0000000140)}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x75, &(0x7f0000000400)={r1}, &(0x7f0000000440)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f00000001c0)={r4}, 0x8) 23:25:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 769.145186][T27753] FAULT_INJECTION: forcing a failure. [ 769.145186][T27753] name failslab, interval 1, probability 0, space 0, times 0 [ 769.158106][T27753] CPU: 0 PID: 27753 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 769.166221][T27753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.176355][T27753] Call Trace: [ 769.179726][T27753] dump_stack+0x191/0x1f0 [ 769.184121][T27753] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.190086][T27753] should_fail+0xa3f/0xa50 [ 769.194585][T27753] __should_failslab+0x264/0x280 [ 769.199576][T27753] should_failslab+0x29/0x70 [ 769.204219][T27753] __kmalloc+0xae/0x430 [ 769.208429][T27753] ? pfkey_add+0x3159/0x3b20 [ 769.213083][T27753] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.219042][T27753] pfkey_add+0x3159/0x3b20 [ 769.223553][T27753] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.229511][T27753] ? pfkey_getspi+0x1680/0x1680 [ 769.234418][T27753] pfkey_sendmsg+0x15ab/0x1cd0 [ 769.239307][T27753] ? pfkey_release+0x530/0x530 23:25:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 769.244135][T27753] ___sys_sendmsg+0x14ff/0x1590 [ 769.249044][T27753] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 769.255211][T27753] ? __fget_light+0x6b1/0x710 [ 769.259950][T27753] ? kmsan_internal_set_origin+0x6a/0xb0 [ 769.265739][T27753] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.271702][T27753] __se_sys_sendmsg+0x305/0x460 [ 769.276656][T27753] __x64_sys_sendmsg+0x4a/0x70 [ 769.281498][T27753] do_syscall_64+0xbc/0xf0 [ 769.285992][T27753] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.291928][T27753] RIP: 0033:0x459a29 [ 769.295854][T27753] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.315497][T27753] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 769.323936][T27753] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 769.331934][T27753] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 23:25:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x4, 0x400) semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000200)={@local, @multicast1, @dev={0xac, 0x14, 0x14, 0xc}}, 0xe) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) socket$inet6(0xa, 0x88000000000805, 0x0) [ 769.339931][T27753] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 769.347920][T27753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 769.355909][T27753] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 [ 769.379027][T27752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000002c0)=0x1, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r4, @ANYBLOB="00000000000000000c00010074d632ab6db1465c708d9800"], 0x3}}, 0x51e2bb5b50eb3681) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) [ 769.505301][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:25:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:25 executing program 5 (fault-call:1 fault-nth:5): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6d"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 769.795833][T27789] FAULT_INJECTION: forcing a failure. [ 769.795833][T27789] name failslab, interval 1, probability 0, space 0, times 0 [ 769.808813][T27789] CPU: 1 PID: 27789 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 769.816759][T27789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.826844][T27789] Call Trace: [ 769.830171][T27789] dump_stack+0x191/0x1f0 [ 769.834540][T27789] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.840459][T27789] should_fail+0xa3f/0xa50 [ 769.844919][T27789] __should_failslab+0x264/0x280 [ 769.849895][T27789] should_failslab+0x29/0x70 [ 769.854514][T27789] __kmalloc+0xae/0x430 [ 769.858782][T27789] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.864696][T27789] ? kzalloc+0x53/0xb0 [ 769.868800][T27789] kzalloc+0x53/0xb0 [ 769.872724][T27789] crypto_create_tfm+0xfd/0x640 [ 769.877773][T27789] crypto_alloc_tfm+0x339/0x630 [ 769.882679][T27789] crypto_alloc_aead+0x99/0xb0 [ 769.887476][T27789] esp6_init_state+0xe68/0x1920 [ 769.892373][T27789] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.898302][T27789] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.904216][T27789] ? esp6_err+0x570/0x570 [ 769.908563][T27789] __xfrm_init_state+0x1135/0x1510 [ 769.913705][T27789] xfrm_init_state+0x57/0xe0 [ 769.918313][T27789] pfkey_add+0x2f54/0x3b20 [ 769.922776][T27789] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.928705][T27789] ? pfkey_getspi+0x1680/0x1680 [ 769.933572][T27789] pfkey_sendmsg+0x15ab/0x1cd0 [ 769.938407][T27789] ? pfkey_release+0x530/0x530 [ 769.943207][T27789] ___sys_sendmsg+0x14ff/0x1590 [ 769.948089][T27789] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 769.954212][T27789] ? __fget_light+0x6b1/0x710 [ 769.958905][T27789] ? kmsan_internal_set_origin+0x6a/0xb0 [ 769.964571][T27789] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 769.970490][T27789] __se_sys_sendmsg+0x305/0x460 [ 769.975383][T27789] __x64_sys_sendmsg+0x4a/0x70 [ 769.980170][T27789] do_syscall_64+0xbc/0xf0 [ 769.984634][T27789] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 769.990537][T27789] RIP: 0033:0x459a29 [ 769.994456][T27789] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.014098][T27789] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.022547][T27789] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 770.030531][T27789] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 770.038517][T27789] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 23:25:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='I\x00>\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=', @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 770.046502][T27789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 770.054614][T27789] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 770.186639][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:26 executing program 5 (fault-call:1 fault-nth:6): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 770.286351][T27776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 770.457402][T27815] FAULT_INJECTION: forcing a failure. [ 770.457402][T27815] name failslab, interval 1, probability 0, space 0, times 0 [ 770.470408][T27815] CPU: 1 PID: 27815 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 770.478360][T27815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.488445][T27815] Call Trace: [ 770.491781][T27815] dump_stack+0x191/0x1f0 [ 770.496138][T27815] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 770.502057][T27815] should_fail+0xa3f/0xa50 [ 770.506505][T27815] __should_failslab+0x264/0x280 [ 770.511466][T27815] should_failslab+0x29/0x70 [ 770.516078][T27815] __kmalloc+0xae/0x430 [ 770.520269][T27815] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 770.526185][T27815] ? kzalloc+0x53/0xb0 [ 770.530280][T27815] kzalloc+0x53/0xb0 [ 770.534193][T27815] crypto_create_tfm+0xfd/0x640 [ 770.539082][T27815] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 770.545004][T27815] crypto_spawn_tfm2+0x20c/0x2b0 [ 770.549980][T27815] aead_init_geniv+0x329/0x4a0 [ 770.554774][T27815] ? aead_geniv_free+0x60/0x60 [ 770.559570][T27815] crypto_aead_init_tfm+0x23c/0x2a0 [ 770.564793][T27815] ? aead_register_instance+0x370/0x370 [ 770.570358][T27815] crypto_create_tfm+0x1d3/0x640 [ 770.575323][T27815] crypto_alloc_tfm+0x339/0x630 [ 770.580206][T27815] crypto_alloc_aead+0x99/0xb0 [ 770.585002][T27815] esp6_init_state+0xe68/0x1920 [ 770.589890][T27815] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 770.595826][T27815] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 770.601741][T27815] ? esp6_err+0x570/0x570 [ 770.606095][T27815] __xfrm_init_state+0x1135/0x1510 [ 770.611236][T27815] xfrm_init_state+0x57/0xe0 [ 770.615854][T27815] pfkey_add+0x2f54/0x3b20 [ 770.620317][T27815] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 770.626228][T27815] ? pfkey_getspi+0x1680/0x1680 [ 770.631129][T27815] pfkey_sendmsg+0x15ab/0x1cd0 [ 770.635965][T27815] ? pfkey_release+0x530/0x530 [ 770.640749][T27815] ___sys_sendmsg+0x14ff/0x1590 [ 770.645619][T27815] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 770.651739][T27815] ? __fget_light+0x6b1/0x710 [ 770.656433][T27815] ? kmsan_internal_set_origin+0x6a/0xb0 [ 770.662096][T27815] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 770.668015][T27815] __se_sys_sendmsg+0x305/0x460 [ 770.672925][T27815] __x64_sys_sendmsg+0x4a/0x70 [ 770.677800][T27815] do_syscall_64+0xbc/0xf0 [ 770.682599][T27815] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 770.688505][T27815] RIP: 0033:0x459a29 [ 770.692436][T27815] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.712060][T27815] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.720503][T27815] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 770.728486][T27815] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 770.736481][T27815] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 770.744551][T27815] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 23:25:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x2d900, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffffffffffff}, 0x111, 0x17}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000540)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r5}}, 0x18) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 23:25:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 770.752535][T27815] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 770.835622][T27818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 770.890513][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x46) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0xfffffffd) sendmsg$nl_generic(r6, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x7c42a4011e32df80}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x25c, 0x36, 0x400, 0x70bd29, 0x25dfdbfe, {0x1a}, [@generic="b3b32b661afaa2e90ea066005e490ef9467d9774d4747f8d57e74bbb341bbf831ba60506a373bac33233cf159414fb1d6d2633086efab93cb0339f786f75b957353cf223b0cebaab79383d6ea65894ddcfd8bd7015d1168c512c6d0813f829a09ed93780b391e7b963ec35b2889d352b2a2dab7adb0bb1ea066143346301c220836958ca8ae98c69d502f04577994386f7b3669d1ee05aeeb29df2d9f0c710f9e6ef9534a1965019d80024a41c26067dc735e730be8de3ee4947341ab95b178e35f00cd27745ae7277fb16ee0292bc6a", @typed={0x1c, 0x63, @binary="852af9b35a478a927da3a683ba81f902a4e6365ba0"}, @nested={0x154, 0x55, [@generic="972e78f271ab4abd390d7320b465759521dddc1db6c93206f57dc1fbe96265f8ddb7235714db17f92cb81558d3dcfe8312a337afdf1a58f86498e8b3295f482f314728caa03893fff5c81c9baea44751961b55d7e86548d164646735ca57244503e9ce190da54a9452838c8f89695755ed9dd6db4eafa445a9a391a7509cc6d744051923dc5a24d377990097f0f297e4b5ff1f42c359e3e25d8c8e134c12b60a67af91790f70053a5fb263aa94d8a48f4fb5e40b60254911e7dd920c3ea5190f9e40d342de0e105999c161a574a5c190f5214f74203b0b587206", @typed={0x4, 0x86}, @generic="8b3e6d3477d45ba9b196a56874e51a355243e59d820036afae8052d5e10168b3520ad5cfa058e637d009afa0cfcd31f6fb130a1e2a0d55ced099fb05123347ae579b8a0ef18e24e49ed09ae471d11bc165c1a376591a03d0f40acdde58", @typed={0x14, 0x8f, @ipv6=@loopback}]}, @generic="62f3dc4cf316"]}, 0x25c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000001) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 23:25:27 executing program 5 (fault-call:1 fault-nth:7): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db1466370"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r5, 0x0) dup3(r5, r1, 0x80000) [ 771.138971][T27842] FAULT_INJECTION: forcing a failure. [ 771.138971][T27842] name failslab, interval 1, probability 0, space 0, times 0 [ 771.151919][T27842] CPU: 1 PID: 27842 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 771.159858][T27842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.169949][T27842] Call Trace: [ 771.173286][T27842] dump_stack+0x191/0x1f0 [ 771.177647][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.183568][T27842] should_fail+0xa3f/0xa50 [ 771.188017][T27842] __should_failslab+0x264/0x280 [ 771.192988][T27842] should_failslab+0x29/0x70 [ 771.197602][T27842] __kmalloc+0xae/0x430 [ 771.201776][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.207691][T27842] ? kzalloc+0x53/0xb0 [ 771.211784][T27842] kzalloc+0x53/0xb0 [ 771.215695][T27842] crypto_create_tfm+0xfd/0x640 [ 771.220580][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.226496][T27842] crypto_spawn_tfm2+0x20c/0x2b0 [ 771.231461][T27842] crypto_authenc_init_tfm+0x79/0x500 [ 771.236856][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.242778][T27842] ? crypto_authenc_create+0x12b0/0x12b0 [ 771.248428][T27842] crypto_aead_init_tfm+0x23c/0x2a0 [ 771.253649][T27842] ? aead_register_instance+0x370/0x370 [ 771.259212][T27842] crypto_create_tfm+0x1d3/0x640 [ 771.264187][T27842] crypto_spawn_tfm2+0x20c/0x2b0 [ 771.269150][T27842] aead_init_geniv+0x329/0x4a0 [ 771.273942][T27842] ? aead_geniv_free+0x60/0x60 [ 771.278722][T27842] crypto_aead_init_tfm+0x23c/0x2a0 [ 771.283940][T27842] ? aead_register_instance+0x370/0x370 [ 771.289515][T27842] crypto_create_tfm+0x1d3/0x640 [ 771.294482][T27842] crypto_alloc_tfm+0x339/0x630 [ 771.299369][T27842] crypto_alloc_aead+0x99/0xb0 [ 771.304252][T27842] esp6_init_state+0xe68/0x1920 [ 771.309138][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.315151][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.321061][T27842] ? esp6_err+0x570/0x570 [ 771.325409][T27842] __xfrm_init_state+0x1135/0x1510 [ 771.330548][T27842] xfrm_init_state+0x57/0xe0 [ 771.335155][T27842] pfkey_add+0x2f54/0x3b20 [ 771.339614][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.345527][T27842] ? pfkey_getspi+0x1680/0x1680 [ 771.350387][T27842] pfkey_sendmsg+0x15ab/0x1cd0 [ 771.355209][T27842] ? pfkey_release+0x530/0x530 [ 771.359994][T27842] ___sys_sendmsg+0x14ff/0x1590 [ 771.364877][T27842] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 771.371079][T27842] ? __fget_light+0x6b1/0x710 [ 771.375772][T27842] ? kmsan_internal_set_origin+0x6a/0xb0 [ 771.381429][T27842] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.387345][T27842] __se_sys_sendmsg+0x305/0x460 [ 771.392236][T27842] __x64_sys_sendmsg+0x4a/0x70 [ 771.397024][T27842] do_syscall_64+0xbc/0xf0 [ 771.401478][T27842] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 771.407381][T27842] RIP: 0033:0x459a29 [ 771.411305][T27842] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.431104][T27842] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 23:25:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 771.439540][T27842] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 771.447524][T27842] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 771.455509][T27842] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 771.463497][T27842] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 771.471708][T27842] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:27 executing program 5 (fault-call:1 fault-nth:8): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r2}, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 771.738326][T27861] FAULT_INJECTION: forcing a failure. [ 771.738326][T27861] name failslab, interval 1, probability 0, space 0, times 0 [ 771.751256][T27861] CPU: 1 PID: 27861 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 771.759193][T27861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.769274][T27861] Call Trace: [ 771.772607][T27861] dump_stack+0x191/0x1f0 [ 771.776965][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.783508][T27861] should_fail+0xa3f/0xa50 [ 771.787974][T27861] __should_failslab+0x264/0x280 [ 771.792962][T27861] should_failslab+0x29/0x70 [ 771.797584][T27861] __kmalloc+0xae/0x430 [ 771.801766][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.807694][T27861] ? kzalloc+0x53/0xb0 [ 771.811813][T27861] kzalloc+0x53/0xb0 [ 771.815827][T27861] crypto_create_tfm+0xfd/0x640 [ 771.820723][T27861] crypto_init_shash_ops_async+0xce/0x590 [ 771.826487][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.832428][T27861] crypto_ahash_init_tfm+0xf5/0x740 [ 771.837691][T27861] ? crypto_ahash_extsize+0xf0/0xf0 [ 771.842926][T27861] crypto_create_tfm+0x1d3/0x640 [ 771.847894][T27861] crypto_spawn_tfm2+0x20c/0x2b0 [ 771.852890][T27861] crypto_authenc_init_tfm+0x79/0x500 [ 771.858306][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.864228][T27861] ? crypto_authenc_create+0x12b0/0x12b0 [ 771.869889][T27861] crypto_aead_init_tfm+0x23c/0x2a0 [ 771.875136][T27861] ? aead_register_instance+0x370/0x370 [ 771.880708][T27861] crypto_create_tfm+0x1d3/0x640 [ 771.885721][T27861] crypto_spawn_tfm2+0x20c/0x2b0 [ 771.891396][T27861] aead_init_geniv+0x329/0x4a0 [ 771.896210][T27861] ? aead_geniv_free+0x60/0x60 [ 771.901001][T27861] crypto_aead_init_tfm+0x23c/0x2a0 [ 771.906314][T27861] ? aead_register_instance+0x370/0x370 [ 771.911887][T27861] crypto_create_tfm+0x1d3/0x640 [ 771.916858][T27861] crypto_alloc_tfm+0x339/0x630 [ 771.921777][T27861] crypto_alloc_aead+0x99/0xb0 [ 771.926572][T27861] esp6_init_state+0xe68/0x1920 [ 771.931470][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.937512][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.943446][T27861] ? esp6_err+0x570/0x570 [ 771.947831][T27861] __xfrm_init_state+0x1135/0x1510 [ 771.952976][T27861] xfrm_init_state+0x57/0xe0 [ 771.957600][T27861] pfkey_add+0x2f54/0x3b20 [ 771.962158][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 771.968079][T27861] ? pfkey_getspi+0x1680/0x1680 [ 771.973039][T27861] pfkey_sendmsg+0x15ab/0x1cd0 [ 771.977876][T27861] ? pfkey_release+0x530/0x530 [ 771.982665][T27861] ___sys_sendmsg+0x14ff/0x1590 [ 771.987557][T27861] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 771.993709][T27861] ? __fget_light+0x6b1/0x710 [ 771.998422][T27861] ? kmsan_internal_set_origin+0x6a/0xb0 [ 772.004103][T27861] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.010026][T27861] __se_sys_sendmsg+0x305/0x460 [ 772.014923][T27861] __x64_sys_sendmsg+0x4a/0x70 [ 772.019840][T27861] do_syscall_64+0xbc/0xf0 [ 772.024294][T27861] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.030202][T27861] RIP: 0033:0x459a29 [ 772.034144][T27861] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.054132][T27861] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.062574][T27861] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 772.070560][T27861] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 772.078547][T27861] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 23:25:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f00000000c0)=@routing={0x16, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) [ 772.086892][T27861] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 772.094996][T27861] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db1466370"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:28 executing program 5 (fault-call:1 fault-nth:9): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, 0x0, 0x0) [ 772.352344][T27882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 772.396488][T27885] FAULT_INJECTION: forcing a failure. [ 772.396488][T27885] name failslab, interval 1, probability 0, space 0, times 0 [ 772.409653][T27885] CPU: 1 PID: 27885 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 772.417600][T27885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.427714][T27885] Call Trace: [ 772.431147][T27885] dump_stack+0x191/0x1f0 [ 772.435535][T27885] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.441467][T27885] should_fail+0xa3f/0xa50 [ 772.445914][T27885] __should_failslab+0x264/0x280 [ 772.450886][T27885] should_failslab+0x29/0x70 [ 772.455520][T27885] __kmalloc+0xae/0x430 [ 772.459717][T27885] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 772.465816][T27885] ? kzalloc+0x53/0xb0 [ 772.469911][T27885] kzalloc+0x53/0xb0 [ 772.473998][T27885] crypto_create_tfm+0xfd/0x640 [ 772.478881][T27885] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.484799][T27885] crypto_spawn_tfm2+0x20c/0x2b0 [ 772.489767][T27885] crypto_authenc_init_tfm+0x11d/0x500 [ 772.495254][T27885] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.501175][T27885] ? crypto_authenc_create+0x12b0/0x12b0 [ 772.506830][T27885] crypto_aead_init_tfm+0x23c/0x2a0 [ 772.512055][T27885] ? aead_register_instance+0x370/0x370 [ 772.517617][T27885] crypto_create_tfm+0x1d3/0x640 [ 772.522585][T27885] crypto_spawn_tfm2+0x20c/0x2b0 [ 772.527550][T27885] aead_init_geniv+0x329/0x4a0 [ 772.532341][T27885] ? aead_geniv_free+0x60/0x60 [ 772.537124][T27885] crypto_aead_init_tfm+0x23c/0x2a0 [ 772.542348][T27885] ? aead_register_instance+0x370/0x370 [ 772.547918][T27885] crypto_create_tfm+0x1d3/0x640 [ 772.552887][T27885] crypto_alloc_tfm+0x339/0x630 [ 772.557778][T27885] crypto_alloc_aead+0x99/0xb0 [ 772.562575][T27885] esp6_init_state+0xe68/0x1920 [ 772.567482][T27885] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.573411][T27885] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.579327][T27885] ? esp6_err+0x570/0x570 [ 772.583673][T27885] __xfrm_init_state+0x1135/0x1510 [ 772.588816][T27885] xfrm_init_state+0x57/0xe0 [ 772.593436][T27885] pfkey_add+0x2f54/0x3b20 [ 772.597896][T27885] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.603809][T27885] ? pfkey_getspi+0x1680/0x1680 [ 772.608679][T27885] pfkey_sendmsg+0x15ab/0x1cd0 [ 772.613537][T27885] ? pfkey_release+0x530/0x530 [ 772.618327][T27885] ___sys_sendmsg+0x14ff/0x1590 [ 772.623720][T27885] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 772.629831][T27885] ? __fget_light+0x6b1/0x710 [ 772.634535][T27885] ? kmsan_internal_set_origin+0x6a/0xb0 [ 772.640196][T27885] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 772.646113][T27885] __se_sys_sendmsg+0x305/0x460 [ 772.651014][T27885] __x64_sys_sendmsg+0x4a/0x70 [ 772.655814][T27885] do_syscall_64+0xbc/0xf0 [ 772.660260][T27885] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 772.666165][T27885] RIP: 0033:0x459a29 [ 772.670083][T27885] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.689725][T27885] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.698162][T27885] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 772.706151][T27885] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 772.714136][T27885] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 772.722135][T27885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 772.730130][T27885] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, 0x0, 0x0) 23:25:28 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db1466370"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x46) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0xfffffffd) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="39cdb3aa422ba42ec37201000000edf14d6c6c3f588c6407ae281a6506af1704095f873805d4ea3483cb438521f9b73b56b9cca20a964c1c43a7bcf21088d60fbab1397f1c05a43f5afe62310de3f955704f6885bc9c6c47f561a7f3f4d7b627c054007ab16bbe4dd60e689b728da0d2d9cacb4f7ffd2de7ec1ae96e37bd275885ba05b4a27a4aeaf441c18dd3c9e8b9fdd81e003aa5f03c71fe25f6a0fe913f13fd08a7acdd2af340b41b1069", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={r7}, &(0x7f0000000380)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, 0x0, 0x46) r9 = dup(r8) r10 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r10, 0x10099b7) sendfile(r9, r10, 0x0, 0xfffffffd) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000000280)={r11}) r12 = socket(0x10, 0x80002, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r13, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_buf(r13, 0x29, 0x2c, &(0x7f00000002c0)=""/85, &(0x7f0000000040)=0x55) sendmmsg$alg(r12, &(0x7f0000000140), 0x332, 0x0) 23:25:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, 0x0, 0x0) 23:25:29 executing program 5 (fault-call:1 fault-nth:10): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 773.124144][T27915] FAULT_INJECTION: forcing a failure. [ 773.124144][T27915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 773.137693][T27915] CPU: 1 PID: 27915 Comm: syz-executor.5 Not tainted 5.3.0-rc7+ #0 [ 773.145663][T27915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.155768][T27915] Call Trace: [ 773.159142][T27915] dump_stack+0x191/0x1f0 [ 773.163549][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.169517][T27915] should_fail+0xa3f/0xa50 [ 773.174033][T27915] should_fail_alloc_page+0x1fb/0x270 [ 773.179490][T27915] __alloc_pages_nodemask+0x3c1/0x5fa0 [ 773.185207][T27915] ? kmsan_internal_set_origin+0x6a/0xb0 [ 773.190969][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.197065][T27915] alloc_pages_current+0x68d/0x9a0 [ 773.202233][T27915] alloc_slab_page+0x10e/0x12c0 [ 773.207104][T27915] ? kmsan_internal_set_origin+0x6a/0xb0 [ 773.212761][T27915] ? __msan_poison_alloca+0x156/0x1b0 [ 773.218157][T27915] ? get_partial_node+0xcb/0x1370 [ 773.223206][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.229124][T27915] new_slab+0x2ca/0x1a00 [ 773.233417][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.239338][T27915] ___slab_alloc+0x1423/0x1fb0 [ 773.244132][T27915] ? kzalloc+0x53/0xb0 [ 773.248248][T27915] __kmalloc+0x356/0x430 [ 773.252514][T27915] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 773.258604][T27915] ? kzalloc+0x53/0xb0 [ 773.262702][T27915] kzalloc+0x53/0xb0 [ 773.266617][T27915] crypto_create_tfm+0xfd/0x640 [ 773.271556][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.277473][T27915] crypto_spawn_tfm2+0x20c/0x2b0 [ 773.282441][T27915] crypto_authenc_init_tfm+0x11d/0x500 [ 773.287932][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.293856][T27915] ? crypto_authenc_create+0x12b0/0x12b0 [ 773.299522][T27915] crypto_aead_init_tfm+0x23c/0x2a0 [ 773.304745][T27915] ? aead_register_instance+0x370/0x370 [ 773.310322][T27915] crypto_create_tfm+0x1d3/0x640 [ 773.315288][T27915] crypto_spawn_tfm2+0x20c/0x2b0 [ 773.320248][T27915] aead_init_geniv+0x329/0x4a0 [ 773.325040][T27915] ? aead_geniv_free+0x60/0x60 [ 773.329826][T27915] crypto_aead_init_tfm+0x23c/0x2a0 [ 773.335049][T27915] ? aead_register_instance+0x370/0x370 [ 773.340614][T27915] crypto_create_tfm+0x1d3/0x640 [ 773.345581][T27915] crypto_alloc_tfm+0x339/0x630 [ 773.350476][T27915] crypto_alloc_aead+0x99/0xb0 [ 773.355277][T27915] esp6_init_state+0xe68/0x1920 [ 773.360172][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.366112][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.372034][T27915] ? esp6_err+0x570/0x570 [ 773.376394][T27915] __xfrm_init_state+0x1135/0x1510 [ 773.381532][T27915] xfrm_init_state+0x57/0xe0 [ 773.386231][T27915] pfkey_add+0x2f54/0x3b20 [ 773.390689][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.396602][T27915] ? pfkey_getspi+0x1680/0x1680 [ 773.401481][T27915] pfkey_sendmsg+0x15ab/0x1cd0 [ 773.406311][T27915] ? pfkey_release+0x530/0x530 [ 773.411098][T27915] ___sys_sendmsg+0x14ff/0x1590 [ 773.415975][T27915] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 773.422101][T27915] ? __fget_light+0x6b1/0x710 [ 773.426793][T27915] ? kmsan_internal_set_origin+0x6a/0xb0 [ 773.432464][T27915] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 773.438382][T27915] __se_sys_sendmsg+0x305/0x460 [ 773.443280][T27915] __x64_sys_sendmsg+0x4a/0x70 [ 773.448072][T27915] do_syscall_64+0xbc/0xf0 [ 773.452522][T27915] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 773.458426][T27915] RIP: 0033:0x459a29 [ 773.462344][T27915] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 773.481971][T27915] RSP: 002b:00007f4e65defc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.490407][T27915] RAX: ffffffffffffffda RBX: 00007f4e65defc90 RCX: 0000000000459a29 [ 773.498393][T27915] RDX: 0000000000000000 RSI: 0000000020b6dfc8 RDI: 0000000000000003 [ 773.506379][T27915] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 773.514365][T27915] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e65df06d4 [ 773.522356][T27915] R13: 00000000004c7901 R14: 00000000004dd2f0 R15: 0000000000000004 23:25:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0xe, 0x0, 0x1, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000002c0)=[0x8, 0xffffffff]) r5 = gettid() r6 = shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r6, 0xb) tkill(r5, 0x15) ptrace$pokeuser(0x6, r5, 0x7, 0x7) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 23:25:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) 23:25:29 executing program 5 (fault-call:1 fault-nth:11): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d98"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0xe, 0x0, 0x0, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1, @mcast2]}, 0x78) 23:25:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0x0) 23:25:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0xc, 0x0, 0x0, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}, @mcast1]}, 0x68) 23:25:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) 23:25:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r9}}, 0x18) r10 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r10) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:30 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000500)={{0x4, 0x4, 0x6, 0xff, 'syz1\x00', 0x3}, 0x6, 0x10, 0x1ff, 0x0, 0x2, 0x2, 'syz0\x00', &(0x7f00000004c0)=['\x00', 'vboxnet0wlan1^security?posix_acl_access\x00'], 0x29, [], [0x3, 0x7, 0x2, 0xbb]}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, 0x0, 0x46) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) sendfile(r1, r2, 0x0, 0xfffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r4 = fcntl$dupfd(r0, 0x0, r3) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r5, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x100, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ddf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x16, @local, 0x10000}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x5, 0xa87d, @dev={0xfe, 0x80, [], 0xd}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x80000001}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff801}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8040801}, 0x40000) sendmsg$key(r2, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0xffffffffffffff18}}, 0x0) 23:25:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) 23:25:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1, @dev={0xfe, 0x80, [], 0x23}]}, 0x58) 23:25:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d98"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x4000000) 23:25:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x46) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0xfffffffd) recvmmsg(r1, &(0x7f0000005680)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/128, 0x80}], 0x1, &(0x7f0000000480)=""/124, 0x7c}, 0x1}, {{&(0x7f0000000500)=@ax25={{0x3, @netrom}, [@default, @null, @netrom, @null, @null, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/208, 0xd0}], 0x1, &(0x7f0000000b40)=""/39, 0x27}, 0x9}, {{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c00)=""/48, 0x30}, {&(0x7f0000000c40)=""/66, 0x42}], 0x2, &(0x7f0000000d00)=""/13, 0xd}, 0x7fff}, {{&(0x7f0000000d40)=@tipc, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/167, 0xa7}, {&(0x7f0000000e80)=""/48, 0x30}, {&(0x7f0000000ec0)=""/91, 0x5b}], 0x3}, 0x401}, {{&(0x7f0000000f80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001000)=""/163, 0xa3}, {&(0x7f00000010c0)=""/246, 0xf6}, {&(0x7f00000011c0)=""/156, 0x9c}, {&(0x7f0000001280)=""/170, 0xaa}, {&(0x7f0000001340)=""/242, 0xf2}, {&(0x7f0000001440)=""/83, 0x53}], 0x6, &(0x7f0000001540)=""/4096, 0x1000}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002540)=""/54, 0x36}, {&(0x7f0000002580)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003580)=""/26, 0x1a}, {&(0x7f00000035c0)=""/114, 0x72}, {&(0x7f0000003640)=""/20, 0x14}], 0x6, &(0x7f0000003700)=""/225, 0xe1}, 0x1}, {{&(0x7f0000003800)=@ipx, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000003880)=""/203, 0xcb}, {&(0x7f0000003980)=""/236, 0xec}, {&(0x7f0000003a80)=""/237, 0xed}, {&(0x7f0000003b80)=""/224, 0xe0}, {&(0x7f0000003c80)=""/234, 0xea}, {&(0x7f0000003d80)=""/24, 0x18}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)}, {&(0x7f0000004e00)=""/159, 0x9f}], 0x9, &(0x7f0000004f80)=""/135, 0x87}, 0x10000}, {{&(0x7f0000005040)=@ipx, 0x80, &(0x7f0000005280)=[{&(0x7f00000050c0)=""/185, 0xb9}, {&(0x7f0000005180)=""/213, 0xd5}], 0x2, &(0x7f00000052c0)=""/96, 0x60}, 0x6}, {{&(0x7f0000005340)=@ipx, 0x80, &(0x7f0000005440)=[{&(0x7f00000053c0)=""/90, 0x5a}], 0x1, &(0x7f0000005480)=""/118, 0x76}, 0x3}, {{0x0, 0x0, &(0x7f0000005600)=[{&(0x7f0000005500)=""/133, 0x85}, {&(0x7f00000055c0)=""/9, 0x9}], 0x2, &(0x7f0000005640)}, 0x8000}], 0xa, 0x2000, &(0x7f0000005900)={0x77359400}) r7 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, 0x0, 0x46) r8 = dup(r7) r9 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r9, 0x10099b7) sendfile(r8, r9, 0x0, 0xfffffffd) bind$xdp(r5, &(0x7f0000005940)={0x2c, 0x4, r6, 0x31, r9}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140), 0x332, 0x0) 23:25:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 23:25:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0x8, 0x0, 0x0, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}, @mcast1]}, 0x48) 23:25:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x46) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=@newqdisc={0x164, 0x24, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, r3, {0x18, 0x3}, {0x2, 0x8}, {0x6, 0x10}}, [@TCA_STAB={0x140, 0x8, [{{0x1c, 0x1, {0x5, 0x5, 0x44ee, 0x7, 0x3, 0x20, 0x800, 0x7}}, {0x14, 0x2, [0x7, 0x8, 0x7, 0x1, 0x1ff, 0x5, 0x1]}}, {{0x1c, 0x1, {0x3f, 0x4, 0x40, 0x0, 0x0, 0x5, 0x6, 0x1}}, {0x8, 0x2, [0x5]}}, {{0x1c, 0x1, {0x0, 0x0, 0x5, 0x81, 0x3, 0x10000, 0x0, 0x8}}, {0x14, 0x2, [0x2, 0x2, 0x8001, 0x2, 0xfe01, 0x6, 0xc61, 0x6e3]}}, {{0x1c, 0x1, {0xab, 0x0, 0x0, 0x4d, 0x0, 0x15, 0x1, 0x9}}, {0x18, 0x2, [0x3ff, 0x4, 0xeaee, 0x9, 0x8000, 0x7fff, 0x5, 0x1ff, 0x6]}}, {{0x1c, 0x1, {0xff, 0x2, 0xf7, 0x200, 0x2, 0x3, 0xfffffff9}}, {0x4}}, {{0x1c, 0x1, {0xd3, 0x6, 0x3, 0x130, 0x1, 0x2731, 0x5, 0x9}}, {0x18, 0x2, [0x101, 0x4, 0x0, 0x80, 0x3, 0x4, 0x2, 0x3, 0x8]}}, {{0x1c, 0x1, {0x1f, 0x7, 0x0, 0x2, 0x1, 0xcbd, 0xe563, 0x8}}, {0x14, 0x2, [0x6, 0x9, 0x7, 0x3, 0x7f, 0xcf, 0x20, 0x1f]}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) pause() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x332, 0x0) 23:25:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r7) 23:25:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) creat(&(0x7f0000000280)='./file0\x00', 0x0) 23:25:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0x6, 0x0, 0x0, 0x0, [@mcast1, @local, @ipv4={[], [], @empty}]}, 0x38) 23:25:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d98"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) fchdir(r0) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0x4, 0x0, 0x0, 0x0, [@mcast1, @local]}, 0x28) 23:25:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) [ 777.540521][T28024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x46) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099b7) sendfile(r6, r7, 0x0, 0xfffffffd) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x31000c00}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_delneigh={0x38, 0x1d, 0x200, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x0, r8, 0x24, 0x80, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0xc8, 0x9, 0x80000001, 0x580}}, @NDA_VNI={0x8, 0x7, 0x8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x820) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@mcast1]}, 0x18) 23:25:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r4, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r6}, 0x18, 0x0) 23:25:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100000000000000002d5c531a38ae41f9f4ef1a15f661ffd1a83639ed3e"], 0xad}}, 0x0) 23:25:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing, 0x8) 23:25:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) 23:25:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing, 0x8) 23:25:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) shmat(r1, &(0x7f0000fea000/0x3000)=nil, 0x7000) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES16=r1], 0x2}}, 0x0) 23:25:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) 23:25:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x1b, &(0x7f00000000c0)=@routing, 0x8) 23:25:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) 23:25:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getcwd(&(0x7f00000001c0)=""/196, 0xc4) accept(r1, &(0x7f0000000000)=@rc, &(0x7f0000000180)=0x80) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f00000012c0)=""/43, 0x2b) 23:25:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r3}, 0x18, 0x0) 23:25:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000fea000/0x3000)=nil, 0x7000) semget(0x0, 0x3, 0x2a) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x8}}, 0x0) 23:25:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000001c0)=0xc) write$binfmt_misc(r3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000b40)='/dev/vcsa#\x00', 0x9, 0x81115117973cef7a) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80808}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x134, r5, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x8}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x882}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x705}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1180306}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc58c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x0, @local, 0x401}, @in={0x2, 0x4e22, @rand_addr=0xdb9}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}], 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) 23:25:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(0x0, 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:35 executing program 2: 23:25:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) [ 779.257775][T28137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x40000) r2 = getpgrp(0xffffffffffffffff) write$cgroup_pid(r1, &(0x7f0000000180)=r2, 0x12) poll(&(0x7f0000000000)=[{r0}, {r0, 0x4000}], 0x2, 0x7) 23:25:35 executing program 2: 23:25:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = open(&(0x7f0000000280)='./file0\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x69c2ff3b8034a97e, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x800, @empty, 0x401}, {0xa, 0x4e24, 0x1, @mcast1, 0x101}, r4, 0x5}}, 0x48) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4404000024000705000000080000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 23:25:35 executing program 2: 23:25:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"/344], 0x131}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f00000001c0)={"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"}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x46) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5000007, 0x10, r4, 0x10000000) sendfile(r3, r4, 0x0, 0xfffffffd) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8080, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e22, 0x9, @remote, 0x9b7}, @in6={0xa, 0x4e20, 0x5, @empty}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x3, @mcast1, 0x9}, @in6={0xa, 0x4e20, 0xf1, @local, 0x3f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x6, @local, 0x10001}], 0xbc) rt_sigpending(&(0x7f0000000600), 0x8) close(r0) getsockopt$packet_int(r3, 0x107, 0x12, &(0x7f00000005c0), &(0x7f0000000180)=0xb0) 23:25:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000004d000/0x3000)=nil, 0x3000, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x100000008008) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x5, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x70) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000050700000000000000", @ANYBLOB="01120600000000001800120008000100736974000c", @ANYRES32], 0x3}}, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0xca) [ 779.831108][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x54) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r3, 0x100}, &(0x7f0000000180)=0x8) [ 779.944715][T28182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:36 executing program 2: syz_open_procfs(0x0, &(0x7f0000000100)='\x03\x16\x8a\x10@\x1b\x99\x1f\xb1p\xa4\x00\x00\x00\x00\xea\x00') 23:25:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x46) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r7, 0x10099b7) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) r8 = open(&(0x7f0000000380)='./bus\x00', 0x1e700, 0x19e) sendmsg$nl_netfilter(r8, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x158c2e7b23cfd2fc}, 0xc, &(0x7f0000000400)={&(0x7f0000000b40)={0x2658, 0xe, 0x2, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@generic="3fd4baecce3a09ad5416eaa1270711cc5b31568e51f8e6e4ec0c6a59a040dbd180d0d8bc9b5fae50784ce9c77a282f55d92174303c12e2a0aa98f7253a20b0cd14920cacda1afbdf0d20997fee1a333e8d684b6d3a68eb719a576701bf4de3b83efbed79535a6b92c15fac5f28eb5d5381b2f73d4dfdf9bfccc755f4adef706e446f388436490618eadfe7f36551d3a2f8cc0bd83bf519a27f6c46179b48605ca6bf350c24b87e6ad091777716a02dfb354564069c6adb82201bf8113f636bc0e5a4932125611945093f9b3817f269d2dfe14d2b09353f0b82c5ccd43d255c2a75a77d0020be58e482917099b59a133e893d4d426aa9d496bfe26c3f5d09d6bbe43ce2bd61f9d546c34c28420d45cbbaabd539dd3e23a0166635587c7500448ebe65033d7318bd341ed1636aecfc748092fc9db69c5bf1455f02220da180c80f7a6fb30e9f091be3b0082ce25e4ef0373c8386d6b184b59f2a899c588ddc21501de2a594a2cb4f548427df9995fe801b2fee91764010b07b0751f6bcb98a04fd04d8e70b7af0c5e8ea4fa8c50f6a010b51e1de65e326621c09022ccb2ebd5ca562a344f1de448070e9c3eadfcef1a51fb9d0e5059c534657e7d2630e1d8533be5ad834f59ecee9408d34e0693045dda88e457cf4a84bf3b59653c87cfdb27770a752c76c914bc1aeb99c92b4359d8f1f9d67ab8c2dcc0b10451b25828da97574cff9b10dab76eb3025fb9323b8887c4a6304409022b830dbace030998bcc55d52a36eb62e37c9840dc6f6219b0e373bf37dba69d196325256908b97b1dad02752a0c59014867a26a34d5fef9ad3622eb376924117c8a15962be71d9b3c6ef5300bf6705510ba320ab5142ac3609fa97c827371f78d89b03b61ee817fd970cf00eb08aa2dd6ee6129c7f01970e5e8dfdd1f7809241e5d916f80e274e3e5bf38159e5d8db880df056f3ca2811be661fbea0dad107f5acab51bc851c5a92cb2aae31aa749395f07e608b693318cfa7ad8b470521682f3988eb607e3298e58a0b32118c7c9b23eaf64dd957d462ecdd055703cb32a0361aaed411b00b42efd95f936dfd274d044ab37dca1bd933b22bba5abba34ff4d7887f90c4c1e0cd287244961eef62566f13cfe391a4819478cf59e34b77761f49822871a06a8439f3e0c0de966b5dbc65c7147a7b7daa26e1531ec8cb3784ec3ab1cfd614da1145b0283f107271927850a52d1d8e3532a2be00728a00644d4ae78b1d1993f0e919fc4a52d67e285b1e4104abece0cc4596e7c4ef062fd88bf4688c833c02ceafebbf0adf85a4cd387a82d39404177acc4d332d5f7749925343f3c367e30f8d9fb0ff707b219ccb242b34aa91e3943a7ea5aa7adcddad2ac1e89491082ed5aad50ea16fe78dd8d575d9173b8807805b0a839f85aac0503f62dadd9a0cc6de0c24974eb2a75b71381a40948e21bd70405df831fa2b4b306c5d810238b031eae05ccb0c15579ff84ef299e1c61c787412c873d1864cdd8a66bebceb1e4f2948ce3c416fa046546867fe3f24059d141b7995d783cce2baa511241099368828dc2dc5d2f188ba6bb856485fa39974d225de0c4cde47fcd540b68aa4a3d3b2d7db913edb5f835dd53d7f1a7b72a11f1ad08a1284182386565438823ca48357027d7c640761c7fc31b6f568907ae2b3367952ae3abf113992fc471e4043343cf6b29954800422706036b0a7a44fa6f413445229d5cafa184348d3eaacf3dfae48028c527c3ca77aeb8e27dd9f477aa394ade731e35d3f6dc9855967c7cee0427015a7a938df830704a6390afae8cdf10080f62dd2fd5e61482652400fed3fdfde428c9af0c35ca86cf5b4ffe38180994bab2df91c62b990ae9519a721d36aa18ce6a6abae0ddcb85e59f701e297d16c28712d31192e64f74a2f9b182459d2e9aec416cc75b0d36040b7dc6e286b4ca44234a561880eabd3661f085b2fe8133a399416ab34cf12de0bc4a31cf9b863c7448c6d25b79ab966a94cb39e63fdab22cf8564b41664d9022cc1a1f4f7f3c8fdc2702793456a8080c7693bd1a3524ab8d8009aa85e62fe31ac149ebf6ef56041cb2bf53c129086ac80c4840b9f3f5cb088143d7c26102dd0966ba3e23ba1afbc9f1458133a311badaac41a1c462bdab6b6534dc2f0fe3cb51296bdd3ea9b62f469fad1e4ec663f0a5097097d0ece50b1008e20b72d5378700e135a8d74ba7f237408c132356ba02a4597c79d947499bf7ee6702caa8c5a4779741af2be5d5b7221d7f13a3b33a89d189dccd1df7ca4983a34a5b47fdbc5c0788239ebbcb27b9059ff221efe7fdc2ea0ad056d70612b8e9f2291607d9d664bdbb501924ce6048bae5c6c8a7cbb0be05872835ff818078d1012c8ae8557d10ddf113af2c2698abf4e491b4c37e35793b74de5c28e2e7be1d9f0460a94de14ec492da18b754cc72ceea61cd776a65fd37262af335342a8482d5c6ad08b95fe5bea0feeff8e404e77910226b18449967424ceedd096bef8b23a0b785f84f22d5d54903cba9728df012018f188820227cfb159a4fe172ed869b6f35f61e90ed6af31114eadcca5b263f552b7f682176bbbc8d1fdf7714468c725f05b3d6edce68bb86d6566e51f282e5d56285389e9fa13ccd2dbe2c1aeafdb87d9812a19ce4aad435198b7caad7da529305278b1de4d1df6dac239d8fc8259e2e68a12e25b18492455acf8eef10a6729bd2bbdd3273e04e0f55c2365b797817254f81a8859736a4a5f7465f7d974300e3d43d1dcfa5f2b3d6a396f4ca5433983650580fd1b53985b83ac1e2ddac2ce267f51ce0940a18afb4178c1738876f0c0f55151a699846ba8258f98fbc709fcc48a82127b450ca7989d9e42ed29631e0d05b64d266d5bc335d6c3e5d46fbcbb3251aebdba0572e4b68071d00ce1e1a711cab15ffb7033d3d4501903f377609395ac2f61f27fbb6773b52cdddd29663a7832cede06afe7f2276cb439992100f7db7e13956e8a8a914fc289bb82bfc5de81ab192941b6af0cba8aa6c67e249309d669be6d8058d89b445ccea7761b5e7e2349f77fdc2a4e4b21415836f4582ff652a418cf8e82855dd0ebe3417d88b0795d99d9d63a3d7ea788fbf81a80c129c969638f334e30f68bf8073153e29c71ae74a3e1b3bda2bac7ad6755e611c835ad38b5840400c939f44550f12c8f495951e0b7efdf5b6f8c8d300cd3c5b77814154d2d8fce0ca289ecde2b8587a103541a0f8d39077a5c42dbb8d38050bc77d8b1571841ee207e0103012b994204504186ab786c338bdef1bc02681be71cc40ec04d2ea237f65b53b64673837c469bbf9deff08cbaf7e0cb956752a4ab1e2ba0f74caee45327ad141cc1154d5ae881d33b0343dda8979be7ef217c8d20d451b0f5f78323ab2b797660665f88bde5469e4a0d35cba77c66f809bc82fa9b4d387f53c0db30799737e6171d2f48d98b5d1f55f6bdd187ac751e4dcb3642c85095b70dcf85fd53b034413b7a64deb9b920aca192ea9da90188ee39dd90befbf150319aeec72c9391fab0a1a27fa12ed2a4122883b2c8666f19125e49e259e01d89b0831f1c65b2f689746d729c20497d4ef9866a45380817800cc43c52817d5115435247536f0601c9777045e232dd060fb16c165ca93ef974065c96ad49c72cd71e78060d4665743d59fd0d8b298f7f83c4cfc59e8048d18ab6fbdbc61c8f33508884187212f7fff498643305a591c48139adfcf2ec0ab0736059f384fb11baa54d059ca20187be1a809e7fa35c8a12b5f8d2b0b8d31f2b6f5d5ab07f637c3555ea23f63c97ce1737de7bced960d7b4a362f7869fb947198f3a0d73d158d20a8c44fac40a53401227066e1054e1c588267438a8e8af4f1a6f410bb6112b5cee5c3a730b41582df1da242296ac3835175fde64e4d646f8cdd035d1f30ab69576f2aa74ccac8256f8e476e34a2d33c768ddf31e2ce8e2afe065210d696aa6b11a971862e9f98876490e1c04cb7db67419c2c3b80639171ca8cc9124e79bd854954bacea11aa60ba0833684bbd87c9c91086390f3fe5dc91d4f0ba99f9d140e10783a911fd456c8ceb5b679517515dbd82876a981141898d4442d04137b3666209ad3280c64ee11c88c18671859cd6ff620c3be88df8d59d66afd682f68b9a695e1186460152e0d96a7f2593de43ebaa07f4e3da1472f79fbed2cd45de63747ef355aabf966ae2d0f43d9c0b22b12c4163ddc7484ea1a2eaebfa0637da9d85c627491c6bcbdc93dac880cfa75b3edf10a37ca637a8d6e8d484f9e3d0b58137856d96a3af40254fde30a3f742f13be431f296489122ae242ecc073242299cf5845d1febc2a41a4ca2d431a0ab6248246fd1b748ab5d77929a0f2747f9958a79b7d45b6da27f22cca907597e339488babaf8a76430acda00cfc31a91a23e0767e742d109481ba5a8d32b595e3d262a2abe30010a0367354d740cf81fa3f7a8deaec2c5e9b1eb70578b46cbc316336a906c61cb0958ed7f7dea809f2e1d2ecf53f3d6808431e5c45e49cab09cd41e201b09ed22e14be4819bc254217b0169eac31efa8088fc4c276af7944737005b73f548f03d03a7a27275a35464879f801dd2e6e6a0e353fa403950f56c8875db3717988c101bdd14aeebbf4a15eb8016beab14668d909c644094f00c6365a2ba2658fc28d08e2a3ef97c595d6ab17b144a1deece37811cab75fe3655d26542a71b627daad14884ab53695712253d66cc8d9512cc0c3a53ecb59584742359de95ddcf8107a2c05278c61b8a893d3b614e4b2e21bd932c30dd2f30f9b449fddbdf61ced0c545ff26310e4599485c56b7a7dcdb45554863f3fcffab968228fcdb11ae1ce871868defeaf29d0057d7e0baa20bbf25a80ea51af34e29862df8eadba4f898748a0f8fb427b266334a854a86b56f11129d9634ee81411e771dbbb68262b79855a665189a4dc5a4bf3a64886ec3b1d60ee632bdc9e6938f0e64dad61d2c571d44e31289614ccfdd9000cbff8f01659075ba02661d200578563e7fb9c9c40268b3194a57b51f5be053d2d9b934062e955c51d380149511da6086f965d42c308b71bc858fcfce5e60da205c0a4fd02cd189b6c73d04613f3e31e7d1cc98a59bae488f6243d32ad58a2a8e58041f6fdd533d17ab420077b8945c3e70802cad228d10b806344edef15dfd00e68c1778c4f62be0a10893407da129dae8f7b90fcc4cbcfc9de3b17b9f89babdda1292658b55f143ef38fd12b79ba469c61b85335cc6a7dd1c4f41f5041dfc90bf9b18e31cdfdb458347ab59d095818c98c270b0d02d41239799ac13dec52b7f2d5fae3b31666b2b8027040aa550fb7b0d7acbd9542e47c9ff8b9b49647e1f9d92e7f4dc805ae3c567547f25ab19a850ad900dbf2c7f8d98ab5e4a9ebbc7dc77a97113a4972163439246a3ec8a53749b09da04b80b779589558b32971ac52ed51e88f5f20f277212afd98a1ff7bf5636b8d1e576e7b56da9c29451a34cfe7847d361e35750b004d6200eb823cfd5869de3fabe35c8d98c0da5c58109f411f1b6efeb9476bb014b584922efc4dd37a3cf66292322db32a0fd3935a3e6b9d4b34f185fb44694ef08b926e1d0671123fdde07a8a860251c6d940431b1c32e4214d1953769d0618e744af94d1c7125fdc2369e9b7a8ab1ed951134b978a99f79ddddd3506a4d8c157299879b969bcf6557447c08715c5829e7f1a97001f6a7a5a8d36bb82cd79879c6567f1a8ee962ea9c08787e8ced64f4e4f3552b8c318bde543d9b34456cd", @nested={0x1b8, 0x6, [@typed={0x8c, 0x21, @binary="c2c946991399de923789db69e1a6dc8472f61c6261939f9ab2bb55d1f441a94ac012649fd87c0223647e34b175d7f600fdfc4672b932ce7f19d25e5b003c95f2dd51e140413a850472800eccb252b5f9dba6aa2e454a8eb2cc417d5022ccdd0e818e13e35a767ffd9b5f9500454e9683a4d96e324ebcc951ba0f55fe4ed6e6b0d0a1ca5f13ba"}, @typed={0x8, 0x6e, @fd=r2}, @generic="a708551c1d48c5d82467a7f482c1dcf22feb8c2b6043f70edce4619c7f9f64ac944c6d59c50369a3912107d490726257a2321570e6e0cb2496dc72aa682c9824c0f6efef0fb799e4056e295c10f82f75f8b5ba3915199cd404a683af0756cc71d6afcf01be5259a1162a4bd799dbe60c8b202f7dc77053", @generic="7ff603739ba8cb49b63ef41f1d4d5e45d43d268d64445a6ccd1a00845b7f30981f91b36d15395d86dc234070fca94e61abe5a7e702f081ad6591531cd1723475ba5d1c1986788aeb23a4be01c5450ae80dad05175680329b77422b616fc744f6daa6228d8fd9bee20d1bf3ce11561febc0c8bf0e3d19d239ff6fef8560ff9b38e69b53dec8b7", @typed={0xc, 0x51, @u64=0x8}, @typed={0xc, 0x2e, @u64=0x1ff}, @typed={0x8, 0x56, @ipv4=@broadcast}]}, @generic="77bcdbea3cb0e185d1699d2f51592f249025db0185a23482ad9ff7e93191fed6208dc69b10ba72da49658c16d08028b402fb2323580c99629f71e1c137762617f11a39a14d694eb4e5d6a69714b0caafa3044155d13b80d2e1b7938cf3f19a9c1d80156deef5360105380b6ea7bab3c5367d2cbdbb0d04e2f3b6e9d7d4a9ce65ead755cc2bfb7d3739207a0d75ec7a8c3a49de61bb304a039023ce08eb9eefbb3784a3b52d1f561d22ad8027e36c21", @generic="c96879e9", @nested={0x1088, 0x2d, [@generic="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", @generic="4f97497f45af2d225bb1ffd3e43b352ee67dadabe9de2596886aabbd9400d4dfe413de5d071037c85eee4326d1f80ddf7a04b68fdb8991b8e4fed7de5512789e977124e47d9b5df7ef4a676f04441ed660027afbc80323d02bea3fce4903767ecad4f7af36be1720c69058b2b0fa6f5fcacf6f1d1477817412ea9a8f0a938a07d634"]}, @nested={0x120, 0x26, [@generic="e15999b2169870281fa1d31a8ff06df6425cf2389c3a19f7a24828ecfd7dc080f9ba67ea3b52c171f6974db23eed31d70cb2e7", @generic="4ec73599ff658e142f4e8ae22e3a2978d415bbcdab77b3c4c61b82fe28ef39cf8841fd4634c00773d6ecca61933e6da83d0ac233b7472104c724168a2cb11a12ffdf731ff08f032e4e069f84a0da127274fdd80f20cb5769080c40d70f52e4e60973691ef48a9715921b0578e64dcf6ae68f49f297e7ab69dcbce58c76549a859c969538398dc0dba888605cde651635d36fd4407f6d2368deb56141fd32521cf3c6cf2e87bcde25ae0561f0d9674ddcccbf47003a", @typed={0x4, 0x7}, @typed={0xc, 0x7d, @str='ppp0^(\x00'}, @generic="0e2f8691e8336211c2f8270fc9506a93e9ac62a6b561e6737447347729f585ade1f2"]}, @nested={0xb4, 0x42, [@typed={0x8, 0x47, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="eaaecb8e796c7c88199d5c24967e2c6188b007327d13e663c2182df60e5ad99df91760d1f9bdc10f8bdbb8a7f438a1272acd7de77bb71f1f9d32b7ca5f9af995408c1346265ac32f2b308a777a08096031ab4a03a8f5872f0042b8656ecc8693c3275879bea5adc4dea4a748cb9e0b858bdacf4722ad38e57ad5d41d97b7e2ac75af957a839cf69c316df64d19eb90277be0fe05d2eb66b7f2689bb9aeda40", @typed={0x8, 0x84, @ipv4=@broadcast}]}, @generic="019aff0271ee5d6af81354b37194053d68f5680b20b51bf1efb65a586a7451a67e9d", @nested={0x150, 0x6f, [@typed={0x8, 0x8f, @fd}, @typed={0x4, 0x1a, @binary}, @generic="e04298db8be9c9ddee18958c73efd62dd2358f689219c24d6aff49f917b5821ef4ad1a4097180a0b5367f27164fec2cafed4c53cd26140d8aef0c9c1c4d84cd8d2c8910a744e780d90b4a71f674adf1c441d15b685aeb261055441c933beb9612802f4053be2f0f6a6fa7831f89a01348c01ee2a48377418a430cf60c5016c65633bf25df5e6e26bcb5e56cbbd9f9edaaeba419dc8e9a923dabd1b57bcbee824935392bdc2f49a76038df1fae20c62e9716ff0dff04e07fab7be27c08ea5562c3a2dcf8ff70a9363dfe72676570b74f9008d4b8d41316faec6c851477137", @generic="c3f7dac68edc2f5cdfdfb82bc14ef35380650d9ecc0815e37444ba79015d2616332038d737062e1bfde7deb486df8ba1dbcf2e09eafdaccd5ba2d8838061f12a33b0b853ca931ae88c0e797fa99eb680066f1368a6e15b76e7509ed30bb323b0"]}, @typed={0x8, 0x4b, @fd=r1}]}, 0x2658}, 0x1, 0x0, 0x0, 0x8850}, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newtclass={0x2c, 0x28, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, r3, {0x3, 0x8}, {0xf136446ef74d1697, 0xa}, {0x6, 0xfff1}}, [@TCA_RATE={0x8, 0x5, {0x4, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 23:25:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:36 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x241) write$P9_RREAD(r0, &(0x7f0000000040)={0x51, 0x75, 0x0, {0x46, "3841b73f67ac736d3ad1a0799f09831f98fbe8c3b108a962e6701a70619031018ef8b0c0ae676dd4ec812f46143a04170c10ceec9d2db571e2b2ac9dde3b348bed9e22411d9c"}}, 0x51) 23:25:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2100, 0x0) write$eventfd(r1, &(0x7f00000000c0)=0xfff, 0x8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[]}}, 0x0) 23:25:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:36 executing program 2: [ 780.524793][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 780.534108][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) r1 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)="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", 0x1000, r3}, 0x68) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) clock_getres(0x0, &(0x7f00000000c0)) 23:25:36 executing program 2: 23:25:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) ioctl$TIOCGISO7816(r3, 0x80285442, &(0x7f00000002c0)) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x29}, 0x54a6}, 0x1c) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x573fc35f57a5429, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, 0x0, 0x46) r7 = dup(r6) r8 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r8, 0x10099b7) sendfile(r7, r8, 0x0, 0xfffffffd) sendmmsg$alg(r8, &(0x7f0000004800)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="ab3705c8fc3e36f8fc9e9e15b8b023176b206054def89c7164f15f19b2092486aa99d4fad01e9ab8af160b9126ad0c3527c2467cf5fd7a39bde27f5505221bb69f474d32387bc39ea3a7b68d131fd516ed2337b486a64d131d4bd40cd49eef3ec23bfdc0d9f0ca9990bc401b5ffbe5c11b499e5e57b0cfcd38e95d00fee92a848b3cf1904390e7583cc2e2cd7dbf90bc51de509fe99f807f01a464d2989408643ba0a46906e47b8ecb09bc15a9a0e1ee7dec08880224ff8d67879a0b72b12a54f51e5f229caf7a8370daa4fd361e52da4f3a980dd60e0e1760949126f8f7d8b69036b36a871d1f25dc62", 0xea}, {&(0x7f0000000480)="0396c95a43b873c0d87a164e6b6d1fed62a6d2846222ebe772060c10e53dbae3492228fb882aea023b4bcd967ade30b7bf0981d218ff310089654e4f53aac7817a6e50ba6e1595c537d15d94f06ab70491526f5ff83870c80484a47adc7b28d1f921b62516eab344c27d75f7184027a1c9d91d83d2f9a3946bb5baa0e64f579ede4d", 0x82}], 0x2, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x3}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x79, "2578504aff9ac7d66929eb2376ce34c9ddbbb0154bee86358aa1f1044e2316bb809c80d7ad4eacf3a42c9c37d980a0a01810c253b997d09b37aa2f08949178e7d90eec0118f22d59a642a5b8283e58ea6fe033bae559dd2fb34199664a300527876739ba98af09417c26c7d444f78c1e4c2e5315da9198ef4a"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xea, "bc8018c1e0ad612b9f6019a332b61a99fc414e3f016496c34c034d9d723a3758f791fc5d42713a2991acb260f1f355c58e73acf75073695be1e0989c3317198dd890362190f99ca9611ee4cded2bdee7f27abb7a13952ef9d8c4e0443ee327d89b30dc1aacff000260c265f8d67634aba4bfc6bcc550ac3460f388950d7434e55dc205ab15ad8e31bccdb5186dc682837b5d657a10df793795a34bb600f3659cf23c9953d575fdd9ed13557ebc9940b09d184684606cb796d46661bc62ae21aa6a679dd4200830077dbbfd7315ff7d44a9d9859569257336e7ce153b4e31d2a385da5d3158a66bfede38"}], 0x208, 0x14}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)="7de5d87b9c3837dc18ff912556d1d34016908b681e95025072993703889b84ab9849f13b69ddcbc4f0a70b58aed3928a8fbb25b9ded326a5be7517b6d8c0a9c4bc2c28760da4aa67169d0989fa63be9357bd88b31cff560200ffdf9d4606ceb480f38447df551816e1223d4751f4f1c6e5b8e146b35c3d142761017e2b6d56c6827ccf121f67ec0bfae3761d5bad2f08b0c6b363e78e45e5fceae166808791d6602bde83da2f577ac646f8d25d9251071a006ec1ce89fa96f907a7f73a3a24cd9bb73a51f6b8971e66beabc78a9f6f1f9fe941b18e74520e6976589acb", 0xdd}, {&(0x7f0000000d80)="e106f6e076c360ff170b7f42af818d9b416bb0abd1ec647cc12abb64fe235cf48f149ab906e3feb9f06d70d0c4a9bcbb5e1d86f18b5e8cf073e89bc8d085da67d18f7864760a961b429ff3de462e54ade9f134611c9c97b11ecdd7be9a4739dcba94e2ad21178dbf54c8b694dda094eebb494b74a461ba85f9ae8d53c22f079df46be6fe5749d540bf8117a17df368f953e00c287a966fb21222707c48b58bb513", 0xa1}, {&(0x7f0000000e40)="b9ed93960cb95d5fc19ca77f582f2f300413bdb29a6d8f6d6ece178be9915e5096ffa7d2bd8d2003f779243b377f0fab71060d3e6c410172e5f3c04adfdfe1b3ffb2b0d23229e4c1a4393a262d5e1c33286ded43c22684688cdb4ba47f9272d7be03a8376b2c7c04b0789b7e5dafbb0f4d3d45e47a7571fa538ffac431e5", 0x7e}, {&(0x7f0000000ec0)="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", 0x1000}], 0x4, 0x0, 0x0, 0x8040}, {0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001ec0)="18026c17a576a2098ba1c212aa07c8ec46ead849af09798f9d8fd79d49bfb97c52f49f47bd31ff0c91b6dc130a0e9e0782dfe6932ed7ef820f788d9d00ba6d0b80ed677203c68cba5934439ce92dd3af46ee8fe0e5ceae3747f1c9f38818bab89d832cc919346845ccc230bed34d0647a61164a16e76942ae47425d78883d41324be1125ae8797a375373b14fa1bba35d30cda7d203ceffe234e053e95eceec15c69f4ce74daca25e4bdf528e7983e95108e9af2b986bfe03d3735f9ee6189ae5011961f3b2942cc2efeef3588dc8e9fce2360a0c106de7d7dd47241bbaeee553919409d5f06b91e95", 0xe9}, {&(0x7f0000001fc0)="30e722461939436689d04630334a9d9d1a12128f18966095e7ca88879fbc141c639227662ba8460874f89f47dbad50d073a0", 0x32}], 0x2, &(0x7f0000002040)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x51, "902494d899c9304babe5217fa15ea075af484e04b0e89dd62f1a6c0cf0b22c3c9cec97ac43df32a237c37bbeae1b9cb637b7979d23f9e7e2075f5a51f0064d3db414ae76e7ae4ee509ee5f84e71cd144a6"}, @op={0x18, 0x117, 0x3, 0x1}], 0xb0, 0x20000000}, {0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002100)="286ebfda7d6dbd75be3fe9ee75646b8e166c9fa8c135eb595194068403ea7ad5bbf1333d5047191e875088101783702c4be2bd10851363c50f86341993c06dab9695e8f2b822cc2d06008760fc7e102bc99619b458038d7da1cd5dac249d7a2b033f6be9edb13c65c7d77ee02d6ea71080921b87f047426eb44ac9fc4f4015a5a9337a01af83219a3d50034a616a73c272cd9c481f3816b68ccf4d0760f0bd8e19c84c842140022996f7c61c424298b1f56c1dcdefee13f05fd714", 0xbb}], 0x1, &(0x7f0000002200)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x88a8}, {0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002240)="552774c042a79b84b24ff038c47f3dc1a66552fbb95d8311713e6a7a4aa83429bf38d36f5497297d8cb5ebbeb6595d773383fd55a456416f216bfd9d5a8ced2136672e5e172f2657454462b47286fd4c50c61a38a809f77be462abbb8cfee4b3f48ca848b4cfb6d03444258873971ed88fcafc81a6b24f1dc5c4fc494d42ef85844a834ec1b585da11c1f75bf17c978291e292a2129c7d01fa7c4c2f1f4e975e1e65a4a0fee11bc9d801dd62aade8d962a4d2f4a2d86c21ad0d2e4c25b432e81c736dcb57d20", 0xc6}], 0x1, &(0x7f0000002380)=[@iv={0xc8, 0x117, 0x2, 0xb3, "1692886c9d4c5af0be00ea929d5b8368b2663ef74f8cdf36cc077fade6864fa9d7295f9baf5ea41d70dcf9f544dcb5807c5041268126893fc92a4815cb281b3de4e61658751e4f4b2c147ba883f2e7788a54a3d299402e83466443a490129d0beffaf1822e6f21714583b295897c6818fa5246f524776330f7db19bd2ed0869954914485be596016411e8f81a9364baff2269aabc23775681eb2f757ffcc7f7dff32ada5f9c6e0850425da7e5480f7b85a3071"}], 0xc8, 0x810}, {0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000002480)="88363164eaefd99abb605d4610fc1b49f0f8009a6c0bb84e9346dace49139ad37fa75eaee28e91ef82bcf2a1dd3bc6ede9def7205797f9c6df15787b3c9cffeac2e2a42bffd862a54b97d415f50fb61a80733fad0917775d2f2aead843dac04a3f31476c65f69d60c8e78f6ff429f404f3a126aedbc4044e51ebdea9796676f2d1809ba290f5e9fc0d6672674de1dea70c31ee764933ac681379989ce8851c7e705071e51431f224ef63323393a402fce2040a93122f7d6b43d59de5040284c0badaf8be2e93ceed6a62ff2423c5c8513f845899ac321aa3bddda341d1996f0f2f30e7411115322ec6a1c368966a47ca25335c6dddcd35341d2da36634403fad12b8a8a4ef909e2a7c31d5af3887209547765867cc184ef0c9e2b8a38b72b18dcfed445161864461578bc1be30f5ce26d1645a523a8bd745be398c27e503c43a8407b687ea54199f782e323e4039e54d2cb26729768326245ad071e5d7ec6aa79618f6d08f9cba8afaad2ce4548f09df98d79065d10a979b41e3b16771d28c9fe2813850fc0a0e32d51305ae7b5d28d236000262d96caa671cca58f5a0c695f53a959d8bc2a3246b69fe0b36f86cedcfe5ae47c072f467be2b6f1118b9e34dda25419fb9f1b74ded483dcae2c1b9830111fc007ae5b8d29717b277ca4c3e02ad3855dcceb8fc7e47b738852634b812fa64d20281813f9979920a46547a337537c417b68addff3e7ab8cfc32ce39d583a0058adcc1c53c1950596ef047fbe2174278bfb16c02c2e900f596361d9d721a3b46a990789d6ef62134fe2c18bb072ce597f0954181b10db6b99b8e1a7dcbc1e6af57449cf7079080606fbbdc07af36e845d1752194f1de284b81781e2f2355a9f97b262dc47ea4ed0d47b75f7ee638987f78672f462fa1a5733858fa337bf757edaa18fe8f5d1ed474e8e424a7b47ebb4db2b013a3b11f5fef1df4d0457e016687a42a7a33a01539554d64f10b8b72d002c1aadb70f542fa6bade0542aee7417c4bef7a7df5059ed826e6444838ac5481ac9f9170ceb4e0fe8a1ac4ac2be60fde26cc2601646592c050d56dab5037824ad5b817b2736489ddc43ddaf87d2f583bcfaac8ba5a6a824f55b5c72f675e1214f817dc5fea402bf705ba12ca481060f87f25a849dad0ec6db29a34fb49e750d39cabaa1dbc05b604d7b8782cd27a9802b5ece7214e4f2e090e00ed21e78aced6139964da6d9af63adbb53345e0103be4dcc5e36a6740e7c43d5ba2f3937f0548e4e814e921a842da9293ac6ac61535ede249c1fdcba7b953e45a6b926772437d34618be30195491c7a8cce7b30c9749e1c04a185615f6cc66fd7b63a6eff762e5e4ad1435dc5fb00c2382bdf199850049191ecb84fab961357224fd7ce4dcac2b49ceb858c28dab2ded562a2710ae254840f78fe1a35d1aa577fbb8a422020a47cb28fc925cfce90cb86cdda991f1c3192962b0b1a328ff8eeddf6bd4658549ada889c7f0747b3bf1a377781b268700f1573fc94328258de6ed00651cdf548b6d54ddda4c7228824f2d9cfed0e434c23d61d2deab63597c04a2c33aca2093eafb840c9e660c808fdcd3be38a79218a2684dfb6b79b039f8c29e034f2665537c7e0f2851099f75040279f357a1537346fe1ec71ead984bc92bc541e5cdd956fb4f73662dc0ea713520cc502474f86dd38f17e31fb5d0a9b5017384c496f9e4dd2b56e1df0a343e424ddf1baa870c99f0ee1c127182eac96cf7c37301a42a220478a03854fb26903ca98e7c5879643cba4644385e156796f28402020dee95dbfbe7f854ab3101033c389a483126b58899ae62455c9cb796523671b968691c620484c404e3a6049d84ad7f41fa5a488d4a08955069285a620daa65f80af2d06e91daea7e3ca491380e2f8337c3137dcd36f82fc4f420959e2d8fa60851f24908e22dbedcfa04e40135cfd2425b1dbfa450e5981fa2451e2185db2946a4ae98c36833d603fa0f7c6fba4463caa7c03c74eb7ed883b60e0856403db5c9b7e61660bd01a8b092def8f88944a3580f1d6759725a1df58b02b3db02152f9e7e9d21d5df0d255589e96534477054b7d2d59aa83299798d985318a07228080e54d28751283f6f5ab48c07186296328a2f62f789002914b0151f66bbde825047a2df9dac00006ef278777a096eab50f9b50a75efbdbc3200bac137dd7a39b40dff211e287e7e5b767b38ec679275b92fab01ee1cbb1da39f89ee6f75d306d26cceef26e4b883c75da92ba6058feaf0801f2ba105b6d2c26a5fe001abdd762b3bebf525880502211c57512d8eaae5fc83a1e3f41c220b907f9e9d3de38013af4e16b0930941f96f500026b05a2339529161cb2599b4bf639f571234fa56a754c8d77714c7e2405cb2d038268aa57dcaa4aa9c2ad8ae1ed4876c063874fd2c07ee223fb152450656bc5b879333a7d5c3584600b5c43e1d0880cf3a235df6e583a3ee4839072641c1da8727d81cb2fc1b6fafa855ce5f36f68e084cc7d03437d81847f8b9e2c8739f32810f80abec9ad274cc9b4d612b27e37eb859212f0ae2301580beff430b04ae111aef0f8a2b49555e84fbcb0f068a90cd0965f2496f65f8bac3d533e2856b55f88ab07eac1f61732ae6232be13afccc257300c2a89991fd0e7ea4f79cfdaf377dab60e34dd477ce6c62917dbf3677477db91ee78fb51c9f64ecbe55f890f6107425a33ab290ff6599986f4ded01e749c8785a88cdf489216d944239c764af2d9043e84a3329d9df17ec55345bb0020540d365c6440a4b861ca6f3a50cf65cebce8c40076e44cf6e52fbd1d40237dd1608f179b9291ed12c6806eed41df81420f2904ba9dda26aa02b641abd1485fed587d88f7e284a68c5c355c61902d007f7996d01354114d78fe735af523c3ce6691a4534da92b11c395111ee611c7e407d7d681d9d78af5f9a12fb1b5731ec84923664339f81a22357aa211c5ce34e75e54559107e54dfa1e0282dcb5e341b9a2b6b17f17c5d2e6fa9260a83cf2bf199ff349ced1a2143ea8bb208e494b5592fbff23ee33e5d878875cd9d70b9ec3d81fdc2a6a5868a056e4c4a66dadb11164485aa6285190db9636c2488cf53f670d944f2f41e6018b8f51930893547e0aa37198d70558427b95515cb0d01dd495dd12e6c9200f4613a06cf28009b0fc71886dc7a6bba339781e40d85139edb25fb973d162fb1c3dc5271729e333c8898dd5bb37814c545f074f723879288d2af54d2a1a5b00f0a13a6151d705f709eb721a48f53afa586226d1cc5a216e701973293a2c4a1d878827874748f51d7a2af3976d14ca78b7b845e2303785b24227d73ae5f195e4c40428dcd92f74286eabc2a44f3ed8210e0b28cb7ba2820d7be26b7aadcac7a989d68f800e465b147e4fa53d518b79dce1c151384001c610837afba0730dad14e6d59a6dce70ac9688fc076ce5ef738a8fef5e00e29101f9acd507c6c3d006ad121387f3c9e4257a4a08ef33cfec7f3b6b6f9baa5f387e580d2459fe1a4b4fe63a3689f87c1785c8ab113c0a55ee77b7980b98dc97bbbe65693a0cd290af22da67cc496e78d95e4517bed1d456fa570b88fb85583df06d07cf3ed37fafc07605f087fda541f0fecd6d492a15a13751b7653146f2c21b464047d95140d731ba3a703cae1db7fb183fae93974489ca43e5b019753a4ec7b7e35e59ac35a69619851692dff0e5e67931838b86c493637a8dc649abb4380e8cd6b89bab421ee60eec751f59a1caeffd77313fb1d10b511e1453b4e75315206442264634ad14270c52b36cb74ad96fb27b83a24245c3da50e60c00f8cfe771827164bce365c13a817a6fdde97c02646eb7dded8fa97d744f1d72e4fa8185298c626d09228e2719ba51de80ad446580c7c7a363b654fd3e3a82cc12af115455ef91676ee95be68058cf1f38627da13e286b167a9e542d36d7736a43627f31c06654857fcb6523863b3d0d138bd7ec4684c285dae2441887c5cf486b1c4f01f2c11ca203273dfc6b5761fe78d2b3e54225f63cb961be087eec5d74e95aeff5083505f20e4d0a15ecc5602276408d6331fa7f6ceb2f676d27e26de41ee251295e0e065b79d8b1dfee646b2f00aafc8b3e0596c12ab6f33858e0674e9cf125fceb5d6d91a468ebfe556ea59d7a3b2f9b0a3ddf6d19dda1c1dfa0c40bf84ee7825e22f5a35add283759be15eb34dcd1ff5c99f01c276133a49a5b908698a8651e8572e99948673c74451ed8f3026409c8e13e0bb112477319a0f59c122fb8ed452b904b419f032a61aa522058677f7d8100ec778e6edacf4b590ae7bf7e38440fa237d4411d41622533e4ea87f2362c64563ab05d74b29b51a3c2a7ada8beeb0f6a9e92e6dfd8fc90676d0005d164986687ba6c2dde0d7c2b7322f06c9755696ea4a88e30498cf26d2a585429bd58d2c9544e4cc4c3e3a4056df84d5ca7ce7e7dd139cabe3f6bde28e42dd3f4e2c32342272c7c4f868f7ae931a6c99d75f26d18d17e4d6f126b8d24f29251a3fdbaa820142b0c0028e8f2b5423a1fbe12b489f752ee9c38194f8438db64b657eae933cefb90a6802a1f708cb1e7845f96e915df8b32528cc8697f1ab386d1afdf3973541cfca3284b1a738d925a718ddb557a292d236452e6bf5c9b26f2a908c97a915df8a713ed84e4c704b2915e21503666ee0472513472d49c09ccd47ac4a8fa3ba97d5a15c1d0c7bfd7745057cf8174bc56f1b8a7ba7f02d9b50cf4a0275aec246bd73241f59d33d63bcaea3a12b5e3b8ee561922da1739f4fd83434229ce14f6a7960fbe09cf9db928459ec3978c3c89922fa9d3cc8f29062a41ab0561e77ebac40293bfa4a0848466eeb3753e1131c5160343ce8076c38be54092a4416f28d8b03dc8bb06d1d1740b1150073afdedafb0551a1d1b4d33fede7ba25d95ff9f18bbf2d25a886881bdac1b4849d5393b1292dd02eb1f59dbfe5ef01d16850a937454e521f37c42bba1d7fb1ad56ea104365fb2898e48913618c8fc38f7ecc80af085670c917e2f88813b3cebfda157b1fdf080ed4b6ecaad1b21c2c77c93fe2236c388f48f7896a57836655c5a126d0d19c11b66f45d290c3c04f54d4459348b3c9d94fd6aba01f31c7aaba907d0e0483250fb2274e0f9c795808deb42a1913365b9dbcea791b5e6854e086b02c062122399df6a51dc4a31c2ec0d2f26b5ceb8a1dfcde006477e2b7baaede858ae1fd28e2563947a9e7d9d14ecd4eeb947a3aa984dd16f70ad8ef3efff0831fe3c96d9977c58cbf90493c33e9f63657ac493d0b604fea2dee0fef2396cd7c9ff05637d1de9f4bc909af447a9a1d9ee3d2b985d7e39bf595171afd3c42f04baba8c7777ab46d3339106e8cfe0946a4cbdd22849254b8abe89b73083ec5b031bf709a0520243730445aaceb4c05ca0f342e78a8b7ff980266e768d3a3acd084726127c1302c2f5da8057e215c02bbd370c394ce16135bdbf8f3f789c9acf5e67da20aeaeb569c1f94f50795d8f426c54b1d14b72a52af80f0ff9c5c0cb4711ec0c93d8f821692b2c03196552f052238230abbb9ebca1f3f42c21a40a08373d64ffa8298a0f9298759a864a58e0879e8d10b39b443e6557a48a17d253d8ded60e006e2b5b99ee66f34a87e782f073434a5acc508d802d8b16d5c8a24cec843e26fd07011c63e6aed26e6e0a041d7a17dc2be6831e42207db361301e79ad98544f2d4e5d5e73817c8edac8353bb805c2a9fb29b54f28e90f8f3a62d75ddbf1e57187bbbfd8fa7a66a8d9d7ea2f", 0x1000}], 0x1, &(0x7f00000034c0)=[@assoc={0x18, 0x117, 0x4, 0x100}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @iv={0x100, 0x117, 0x2, 0xea, "c87b239c1e5cfb6c46c7528c982bea1fcc30a6f168e8e4e957c21384edbb4592a5ad3e834013be4c072076906596075553a32b9f331c7652787fd8fb99cb2d6af6098248622618437ddaa6e0e18e0f8e800ab50ebba95dbba499bfdd8855af7d959eb8d45fd707e752552ee00efe8582bd33336628a38f022f9c7a66d28c30a55ef0fbcd943a88cb8583de67d466ca19af92a1901574bd0e84006e6cd1f8df460bbddf74265f98dcf320f96539f9b364dccbc0a2fb30c6b419ed9a85ae0a63708b4bb91243a5b5f752dfcd326581860e97d0f8f5ab45f1ed3b68bc253ac037c0e592034ccc80b50894cd"}, @iv={0x110, 0x117, 0x2, 0xfc, "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"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x58, 0x117, 0x2, 0x3d, "78ebf84c945d95357651c412b9e42cf275720fd9386654408e29ef474337a8040b96d395f8857e35f5476fc05457cfde6c7e29823a27cbdea064e0eb27"}, @iv={0x40, 0x117, 0x2, 0x27, "f9891be4035f3fd397fcc1f8c7a537472d7759d23fc5fef5de819f209b29fbfda450928968269c"}, @op={0x18}, @op={0x18}, @op={0x18}], 0x1338, 0x4000180}], 0x6, 0x800) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000340)=0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r10, &(0x7f0000000140), 0x332, 0x0) 23:25:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) delete_module(&(0x7f0000000000)=',[\x00', 0x200) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r1, &(0x7f0000fea000/0x3000)=nil, 0x7000) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB="b557428a4f2aa813f2a5a5dc50b7d21685e753c2fa2f0ecbeddc212e83fda85085c530d15e933c1603df0a7a42350bd9516494aebc89f1dcb7c99bca9df3f9371c5514795f1876ea4ac2ffc4fdc1bfc275cf9b68546c0223dc9e0c5e2767c20d65b5582bb8bf8558e2837c7c8ceac86e2138204679e055090a95efd7b02fbc17c18b1e", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYPTR64, @ANYRES32=r0], @ANYRES64=r1]], 0xc}}, 0x20000000) 23:25:37 executing program 2: 23:25:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000040)) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:37 executing program 2: 23:25:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xd) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x106, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RATE={0x0, 0x5, {0x20, 0x0, 0x2, 0x5, 0x27, 0x1ff}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@deltclass={0x90, 0x29, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, r6, {0x0, 0xa}, {0x4, 0x1734c0550e98546c}, {0x0, 0x4}}, [@TCA_RATE={0x8, 0x5, {0x40, 0x6}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x4c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x6000000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x265}, @TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0x100}, @TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x12}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}]}}, @TCA_RATE={0x8, 0x5, {0x20, 0x7}}, @TCA_RATE={0x8, 0x5, {0x3, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40001}, 0x34004000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0xd0000, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000440)=0x2, 0x4) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140), 0x332, 0x0) r12 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r12, 0x6, 0x15, 0x0, 0x46) r13 = dup(r12) r14 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r14, 0x10099b7) sendfile(r13, r14, 0x0, 0xfffffffd) ioctl$TUNGETDEVNETNS(r14, 0x54e3, 0x0) [ 781.276763][T28269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 23:25:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:37 executing program 2: 23:25:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) listen(0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000100)=0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x4000, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8eec810d5b175aebebc33508b8519994e64905624fdaacbda36bf1b01ae1bd966555cfdc23e0d978b8930adf2f3dac5886f7daa9bc15203eb66d701de283a3426a91d6bdcd83a89bf42aab790a70d06cf05b8bfeae8287aec2d9fae1f40407927babce35dd6d64614d2bb41ba0bbbec19edb8b", 0x73) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x100, 0x4, 0x8, 0x6, r1}, &(0x7f00000001c0)=0x10) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 23:25:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 781.491814][T28278] netlink: 780 bytes leftover after parsing attributes in process `syz-executor.3'. [ 781.575197][T28278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:37 executing program 2: 23:25:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:37 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:37 executing program 2: 23:25:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fea000/0x3000)=nil, 0x7000) shmdt(r2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[]}}, 0x0) 23:25:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) [ 781.915422][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:38 executing program 2: 23:25:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000300)={{0x2, 0x0, @reserved="2200637aae41a284320183b7f51365795724af5beb2d6b8aeb58e86d985eaefc"}, 0x5e, [], "17eebc71a1fd34380c7c2b3e50cdfa57d8bbe01767d3562571e94d12b8fd0c876caabbe95ec3634ecfbef42c018c7331e4e5e83391ba7737b5d52566a1cdc4491e802c4661cc602492ba77ccd66d85e86c508ae0f624debe1b4434f30f4c"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$sock_timeval(r4, 0x1, 0xd5c18036eda148fe, &(0x7f0000000280), &(0x7f00000002c0)=0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r3, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x5, 0x6, 0x7, 0x0, 0x0, [{r0, 0x0, 0x88}, {r0, 0x0, 0x8}, {r2, 0x0, 0xdc}, {r3, 0x0, 0x5}, {r0, 0x0, 0x3}, {r0, 0x0, 0xba4}, {r0, 0x0, 0x2}]}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 23:25:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:38 executing program 2: 23:25:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000440)={0x4, &(0x7f0000000400)=[{0x800, 0x7}, {0x8, 0x4}, {0x4399, 0xfffe}, {0xfffd, 0x3}]}) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_getaddr={0x60, 0x16, 0x0, 0x70bd29, 0x25dfdbfc, {0x2, 0x1f, 0x500, 0xfe, r4}, [@IFA_FLAGS={0x8, 0x8, 0x5}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x8, 0x5925, 0x7}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x40, 0x200, 0xfffffffa}}, @IFA_ADDRESS={0x8, 0x1, @rand_addr=0x70c}, @IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044002}, 0x880) r6 = socket(0x10, 0x80002, 0x0) r7 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, 0x0, 0x46) r8 = dup(r7) r9 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r9, 0x10099b7) sendfile(r8, r9, 0x0, 0xfffffffd) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x9) sendmmsg$alg(r6, &(0x7f00000013c0)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)="8707ad3b1d13929144dc08260a12f4c5d4e6cd6e3bcbf9b15f53494fb2c5cd680270068ce6b15043dc4caa68c0ccb6689abbc6508bfdd3a2d7f4dcf264427e475173bd5b93369a5650fbb8f623ac6b417108542ae60ae38ae79ea361774c3203b1aa203ca5d936dfd8", 0x69}, {&(0x7f0000000500)="b50192bef6396f491db69300ea3e27b652da8fa81fdb696ae01be7819bc0e2cea136cad9c4f3843e3ddcb17b375dd0b2f3bda38257c84cfbf48d01b69a7a2b417b29e0a31e07b822bad78f2b6ff1385ef9e32ac0e0f8f39640460d454a2632511e9be2fdd9ba", 0x66}, {&(0x7f0000000580)="9eeb3547d5048d2bbe4e9485e161d376a072957c2785db7d1cabc63d5e23aeb6c9bcd6c9d1c5b5410012b7aac1231d7e415614dbf71bcf2f818844259b24ddeff795c2d5a941cd431c303d3faf0c7f0c69240dd691800071b7bfdb3ede2b1c36f439b393e2fc1bd63e9dac2e1b141dab93d02948f34ad16a230729d2f6321e7bfafc2bf64830991262f7199dc30f187156b4221958037b141a3de0121c79a1bbbe1fbbbc62f32a539031e2d97cb368fe4159ff06f0455fd58df628f211790fb7c708d19755b3d5a4c6fc8e41e844ccd45207b3553ce4365b9d0f756a311f032aa67c4048d4cf", 0xe6}, {&(0x7f0000000240)="12c1a0057e14ff477d5ab04430e1ef2dd9d0682b03", 0x15}, {&(0x7f0000000680)="280369dbe4fe504d24ff0023877db57cc9ada347d0ee3e70c52f2cdb2d84dbb41d96fb520cda6678dbf3f30777211f80219c3cdc88dfba409345ccfaf28871a5caebe221c5def4951f47c6def4e990d793c62f20da487fe0d68e2145f4b963df3b2c0d87c057acea8a7f5c89c7ef4463eca48639d4b032", 0x77}, {&(0x7f0000000700)="41a73acef6ef9cf9660ff38467168c8f31803150310d8b4007ff6f3aac0628cbff6b324ae46a07147563a7b641e2833f5119a85f520c01fb0867cbb3f709f9cc9da0cd3f66d1e331f4e3e2aaa253d5489cb06c0c46511d58cc4f4bd7810f086d9696122ad6b8ddef51f89e5c838ea0c01f8b6dc5dd608655403f", 0x7a}, {&(0x7f0000000780)="50d4", 0x2}], 0x7, &(0x7f0000000840)=[@iv={0xe0, 0x117, 0x2, 0xcb, "92476898d8fa82bb7fd6f8abd296e3b35af8c4c44ca985351b26e9f28562c55a66f7010a73f9c4abe2f31cf778d62111dc6bb71127938704471cf9fbac2a31f9aeac918e743b82c3e401733dbf9033ce7eea15111473e37ad792f802e22fdb887b0dda9b33ae0606ce745c6f82186b5ad575b85392633d7457b0c8dd7f377eb90139b6754cee15b1441f6f3c64c4b8104d0377f182df2206ef5bb22a565d2047c6cf61ea49cdb357dd44677b0cea3fb30877dea5f564196d00bdc21e7c36df548bc094dd0482a1f294b528"}, @iv={0xd8, 0x117, 0x2, 0xbd, "79d237fb2c243fb44dcea97da83ecfcee706437d14a1fce95e3a7828a630a5af83818bdaf6475574b276c06fb3dc992c2983fc1c43b7336a8e153432ae86ae774cdd24924e59de37d010b2a8c90a25e14daabb2b8f1978214e4c31aa68d236523717611a4c3eefaa5561bb575d4e177b00c88e1db38ce028519d1608bcfe79c1297977095cd5bf562baf9db56a9f405702abf78154f0f612c3309fd6931c8960e4575229b0216b21ed76cbfda0379d07f31f786c710a5f6dcab64f4aa4"}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x3}, @iv={0xa8, 0x117, 0x2, 0x91, "4c932e6b66ac70c64d1fef348466664d1003f87f1a4ce66c7a42413046ceb2b4b408b70ef7cf2281b4686f30613c17c31c645a38af28701f00f592838414103796656244281163f093ee889f4f59ef0bb595fa00c0cc85f97e3585f724aa82e761980f00cf4f53eddd1dc15586323b89da24e6fa447a7632289fc813f7df654fa35d559e41fee46128eff4506c45dc4c2d"}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @op={0x18, 0x117, 0x3, 0x2}], 0x2f0, 0x84010}, {0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000b40)="11aa8696613c35240a5ca4bb46a09a7c47df5788c9197f4eba4b4f5334241b2fcdcf6ae8f4190ebe19d08b307e989ee77111d3494550fa879a06aa6c2ceace80f08d", 0x42}, {&(0x7f0000000bc0)="abfa63bbb447f04bfa0c99dbaa4b1f3804bff9c76a05b5283230cb971a088bdbe8c5db202394a78817c9a4c167b4c05d998464257b7cf7a693bcc765f928264b5c93da91026ce621e31b3aca0bbf0c6305859067c6c4f36ecee1c48f73aacac034fba3a49b66674544bd0879b553bc1f3c03644d0af51ad5292d24d9f54d37e8810cccbf1419ed79c5e6895784a18e3913495d396b1cddb4f4c9c38a1c86fbcfe7ad68e2b4c9eb97c1b98fc2ee53b4580f15e560557e929a915d557b5ed420a6b24499f3b04e0f", 0xc7}, {&(0x7f0000000cc0)="a052c45250a0861e83cfc58834d5bec2e8c87989c05a006bb6661c659b9224ce71908826c8360b950f87a7ed3ebc5ec0f085871a8f48bf112300110f0741eb41f9308d43c2570802fd0eb2359be0410cd0ca7a80de3cc264a4511993b5d794541d426317a8c278f0b9fb989005", 0x6d}, {&(0x7f0000000d40)="935a10b2588fb23bdb620019f28ba4c0651daa8413907b49c9376c3b5180d844eef3f042e19d814574894254c475335f2e57bede107630fa49c293d0eacdab92ce0c71356d0905a97da78f3a3ce887dee22d900445060a02c1352e457a29918903eeb2bd51b6a9334952cbefa1f2c52b5f29ec61af0d33d741566b53194486cd6e24bdef", 0x84}, {&(0x7f0000000e00)="08941ae54ca23c1d79bfed8a5fa470f99f22b7b406d441740947c438be97ca16b8462298d97f133b0e65461e17cabe3f6194a65b6dd1e06e70fc5592049cb1f2e8ee70d68a4b3183c4eb92f7a81e5c95d59edfc1f1b13c112d53a4b723a4fe8d2c0d59b26e7b3c7bbd54b0220349f8bb111fefa06dc8daf3c422ecac4c0cc2d136098986c80e9e50cff5a42d59f8a98939d5e10d6c46dc5925b0f275624bbf8ade047d7f5c864b8d721f993e107be55d7b0cde8ef87cf7a5fef7495f4abaf83c0b1a6c563a5802964f5336c03192068d69cff92487e1d0a54e44dc55b7", 0xdd}, {&(0x7f0000000f00)="e594c3a115675e45cc530eaebf20563c3a9a1017bf5d6fd389bbd2d3b621e309d67bddbcd2995e028f4624777a0e508442569e10ff22cc694152b43bc147267dc65f36d0a17f9928fe61cb66c7f8aa1374f2b23f758e73dcfe9881cd1ae7b16ca74448704605939afe33eaa8475cacc6d74843ee6825dd8fd93f4967184ed0a02ec84e2dd02931a9b18017f607c32b1d10fbd3e1e6443afe6486", 0x9a}], 0x6, &(0x7f0000001040)=[@iv={0x78, 0x117, 0x2, 0x63, "72783c553bffeca96455ab1375821857e0beb077c5846c5e41547dbfbda1b7bbad39e7f014ae311e53553d3537b953c287edb7b31b3dc8585d3d9a1a1d4c3e4901cc267144d0114bc3415b60080c32e8f507b3fc5cec40862aaa64e819c1444268ccd0"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xdd, "64dc3490cf02e17ab1e32d51dd52980eada79f44f0d19bb859e58313f902eae6d94ce7a9aa4b6ee3b980c752293efb8e7c4bcb11232bec1489b77da1dd5dc7bda1e067549f3c2884e27c271a89adfdaf9c898a8c610823f0d9bcc939b55bf22d9091a443564ec6c9a90b88486fc2e67c5402119e3bf175b9d68ed1dae4633394ac61fa7f4863aaa4e504a19dabf819d3a9271c6e5ca5b9e8afaf2675004551943bc3f708304ad44c26dd19368c598cfad9a250bf5f71f70d61da364780d0e1a0262f57b885ad0e5f9d6415085069f16d943a1ec3d56eafeda76dcade69"}, @op={0x24a}, @op={0x18}, @iv={0xf0, 0x117, 0x2, 0xd9, "3c58f36cab40fde150ab28d2aaefe19c5c863f23b2c3cdfe55cc74b91da88e52d5e1d3da8fc74b40c46bdc695cf8bfef4906a9369444075ceaebeb107dc9fb0e6dba1c8cf8ee27c49a09216137bd029da4e3aa10dd773a9bd3a90db9dc786ddf7cfe503bde5a0ffb3b036030f0048aba8235e88d1ba82c9b6be80d4e7c0cf9022cb25d0e84a903028af031050fcff9b71ed49c3a9c9dbddb80ce38e54fd61572093bd4d77ee0e578beccb60d45ef408919aebab66d8f90622f0c5ced4d48883ffc61a086e170943b6574adb96555a8bacb03d4fa70df88ee14"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x90, 0x117, 0x2, 0x7a, "c8a546a99426c8272b1ac263298521be27a3f6530077597f65fa8e955f987ef9b8ff3aeeea8a11bf007e32190affeb5997a694b7994e9880ef5de71ba10bbebbeacf0096a5f21f9dd022ac48d19ec55f64acbc4b364730603fa8f075ab302e794a990e247f40ac9764dc872de2d40bc554bd02903a234e449dbb"}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x380, 0x2}], 0x2, 0x0) 23:25:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:38 executing program 2: 23:25:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 23:25:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0xfffffffd) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x40) r5 = gettid() tkill(r5, 0x15) r6 = syz_open_procfs(r5, &(0x7f0000000340)='smaps\x00') r7 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, 0x0, 0x46) r8 = dup(r7) r9 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r9, 0x10099b7) sendfile(r8, r9, 0x0, 0xfffffffd) r10 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r10, 0x6, 0x15, 0x0, 0x46) r11 = dup(r10) r12 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r12, 0x10099b7) sendfile(r11, r12, 0x0, 0xfffffffd) r13 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x141f127c11b34620, 0x100) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000005000000", @ANYRES32=r4, @ANYBLOB="0000000000000100000000000020000000000000", @ANYRES32=r6, @ANYBLOB="0083e800000000d0ffff00000000004000000000d9934a551390cf749fea940578f85bac3121300dfd54f569e2f1d2343eedb3a47965a7d97b405d1c322f89ef86d2bab2f7fd186b49d1ecfef7126fe5356d3e47a8a5790feb", @ANYRES32=r9, @ANYBLOB="0000000000000100000000000020000000000000", @ANYRES32=r12, @ANYBLOB="0000000000000000000001000000010000000000", @ANYRES32=r13, @ANYBLOB="000000000000010000000000007000f1fefffeff"]) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) getsockname$packet(r16, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r17, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x507, 0x0, 0x0, {0x0, r17, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0xffffff7d, 0xe, 0x3f}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r17, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r18 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r18, &(0x7f0000000140), 0x332, 0x0) 23:25:38 executing program 2: 23:25:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:39 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x46) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002c00010700000000000000000400000028f7176d053125d2cf3203553ffc793b082d2278c37e591dda08ba2d5806760b03e504594b6f86b78bd45451a23d08c116d182a1fed332830ac2985e8154be49d2a604bfd1e68841b9e070acb3161e5b62cf5a6526ded378198f778cf987c990e9e1d0463353bee4bd26af3e184d5bc983f8830c75132922752ac611ce617f7c197a56d377fbc653d69c4bb6e1f5b0bbeb20e50a93f19138aceaa56e7f3440c2b1bdb180327faab0a544d94e1a4e75682e381d71a08933c67456d873e9315add", @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 23:25:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:39 executing program 2: 23:25:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@dev, @loopback, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'nlmon0\x00', r1}) 23:25:39 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x66, 0x20000003) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") io_setup(0x65ce, &(0x7f00000019c0)) 23:25:39 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r4, 0x28, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r5, 0x20000000, 0x8}, 0xc) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x332, 0x0) 23:25:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480013ae2d000507000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r6}}, 0x24}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0xede3791516e2d32, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}, r6}, 0xc) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$TIOCGICOUNT(r7, 0x545d, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, 0x0, 0x46) r9 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, 0x0, 0x46) r10 = dup(r9) r11 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r11, 0x10099b7) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r12, 0xc0d05604, &(0x7f0000000040)={0x1}) sendfile(r10, r11, 0x0, 0xfffffffd) ioctl$KVM_SET_PIT2(r11, 0x4070aea0, &(0x7f00000002c0)={[{0x50000, 0x6, 0x1, 0xf8, 0x40, 0x5, 0x4, 0x40, 0x6, 0xd7, 0x80, 0x7f, 0x1800000000}, {0x2, 0x1, 0x28, 0x1f, 0x2, 0x9, 0x5, 0x9, 0x6, 0x9, 0x9, 0x1, 0x9}, {0x9, 0x1ff, 0x6, 0x98, 0x7, 0x1, 0x7, 0x0, 0x80, 0x8, 0x20, 0x6, 0x8}], 0x1750}) dup(r8) r13 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r13, 0x10099b7) 23:25:39 executing program 4: r0 = syz_open_dev$cec(0x0, 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) [ 783.582726][T28417] __nla_validate_parse: 3 callbacks suppressed [ 783.582749][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 783.605786][T28414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:39 executing program 4: r0 = syz_open_dev$cec(0x0, 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x2}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000e7223afead50977b04ec49442559a0f0a025aa8b49835a6c8c63f8f12b2947243fc7f7914e4d9472ec6eb733535afc44e59fa98d012c1a37759625a61296f102ea7e1a83353b1556fdd092eeb649472ffa771890af44643912149162f8965e8665d54ca9bfd980f88edc7f846978a596e8ff488b149e09b753f47947d192e9858e221e71657370c9d7f8682de38a11da417ed41668acaecb3a07e0f8f4724b66274b67b7b00ac593914fea84482dab2fb8ff7a3235f499c8fe7b68a73d2dc2d1", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000e1174000de1300010028b60000ab5834c3e2f7c7e1f4a5a48049eb15919227076b0048b20b716ad078efaa8087c272687420ea5dcda40fa90fcf012b9c2c1ee7fce78b3c859b8f4db7b31eac14be77cea149b6125c2b4ce05d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000b40)={@initdev, 0x0}, &(0x7f0000000b80)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x263, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000002400070500000000000000000000000056a46f7cd7fff6d20560adcd7f2b726f05dde2921e1e2f22aaf4581f4cd88974ed3745215e57ac1473d8d7f0d80e118d7d64ded893be4c720e504f2fa2ed60d8c22e27c7fe91e9c66cde0d1f4def75ba5d5dd258945f3b5344c41185f95a3354d508843a976827866d9a12bed1a7f28b541f8b04b97378316b3647f79c4bbab7159459bccbef829901fdab9e36de9bcda434068829b6", @ANYRES32=r3, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRESOCT=r0]], 0x3}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000400)={0x1, 0xe25}, 0x8) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000640)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000600)=0xe8) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"]) r8 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, 0x0, 0x46) r9 = dup(r8) r10 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r10, 0x10099b7) sendfile(r9, r10, 0x0, 0xfffffffd) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r11, 0x84, 0x7c, &(0x7f0000000000)={r12}, &(0x7f0000000080)=0x8) r13 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r13, 0x6, 0x15, 0x0, 0x46) r14 = dup(r13) r15 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r15, 0x10099b7) sendfile(r14, r15, 0x0, 0xfffffffd) connect$unix(r14, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$SG_GET_TIMEOUT(r14, 0x2202, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000000540)={r12, @in={{0x2, 0x4e22, @rand_addr=0xfffffffc}}, 0x6d0d, 0x5600, 0x8, 0x3, 0xdc5}, &(0x7f0000000200)=0x98) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@mcast1, 0x8003d, r7}) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0xfffffffd) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000200)={{0x3, 0x0, 0xfffffff7, 0xce763b3628bae966, 0x5}, 0x2, 0x1f, 0x1}) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="dcf446487d4b949c13c5233feec29d1ceb0caf01d1f6300ad3efd79ad495658ba652f47d15eacdceb57f4f5fdadadafbaa946a6f4b63d39e95957f39402f0cdd30e5ae27ea73cc4ff4307154cf9f52a7d798fc7c06544580fe38988e329b9dd312739fd82fd3a875e8975a1fce23acc67710d68e6b33fa5c", @ANYRESOCT], 0x8f}}, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x16902, 0x0) write$ppp(r4, &(0x7f0000000180)="31a09a29657a9f435c09aa23de5d621c1b98a76591c82d838449291bea803df2e2651ec5cd3c161b86bfd8b0051e61fc52b4b0eb3366bdec7638a055874053e55f0ec2928dd2ab3df720d34ff5e63d", 0x4f) 23:25:39 executing program 4: r0 = syz_open_dev$cec(0x0, 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) [ 783.889786][T28437] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001700)={0x1, 0x1ff, 0x100000001, 0x40}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) 23:25:40 executing program 4: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:40 executing program 5: ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b0d0000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000c2280012000c00010076657468000000e1170002de1300010028b60002e1ce131e7592b91a8c53e923", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) [ 784.408691][T28460] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 784.442902][T28460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:40 executing program 4: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:40 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) prctl$PR_SET_DUMPABLE(0x66, 0x20000003) [ 784.489221][T28460] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000002200000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000040ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) r4 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x400000) write$P9_RREMOVE(r4, &(0x7f00000001c0)={0x7, 0x7b, 0x2}, 0x7) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0x6, "91a7b68ecd82a93bb90d743be2caf47240a00c98c6e73d4df239d2ab85a3fc2f", 0x20, 0xfffffff9, 0xfff, 0x3, 0x5}) 23:25:40 executing program 4: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x248000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xa8004}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:40 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x66, 0x20000003) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_setup(0x3f, &(0x7f0000000040)) 23:25:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef1fbca83d3b9cdfc4478533b900000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x80) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', 0x1}, 0x18) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0xf4bf7ea14440942) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x46) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0xfffffffd) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r3, r6, 0x48e63d674ef2691d, 0x1}, 0x10) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "a3a229fb3f666c8677c647b3ee0773c36ab07540"}, 0x15, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=0x4, 0x4) [ 784.868595][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800e000ab5f19f3e3209423e1b2e3128c4237daa063321b553d73f058fe6c1f383362662d84329f636a05154f7324fc51940f459dfc72f5bca0aff287bbbdbf2a357ee65db308aa6acdee0d543eb8a5a2068266569a2a13aabfb85b8b"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:41 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000080)=@v3, 0x18, 0x0) [ 785.149306][T28510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x27}}, 0x0) 23:25:41 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, 0x0, &(0x7f0000000080)=@v3, 0x18, 0x0) 23:25:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x6, 0x2000) bind$isdn(r4, &(0x7f00000002c0)={0x22, 0x6, 0x4, 0x1f, 0x2}, 0x6) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)='$\x00', 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) [ 785.565752][T28541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:41 executing program 2: io_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x66, 0x20000003) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x800000000080002, 0x0) recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_setup(0x3f, &(0x7f0000000040)) 23:25:41 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) 23:25:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) write$ppp(0xffffffffffffffff, &(0x7f0000000180)="c562e577453c4d6a54c6f441b2ec93efaa57e76b3375d8b2ed8c8bb233b081248df22826dfbb1b450751d69f7d76adcfd75ab3d74a2f015405abc60a9fb0d193de28d341ca1f2517bfa2bdb2da169243d94184e58a3d9e63e67d189906ba915aa362fcdf2a5a600537efdc73daeceaa9ea9f273ac26c71b68d3b2b7d872615fbec6d7f5ab6cb963eec6d2c33233914", 0x8f) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0xfffffffd) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000000)={0x8000, 0x5, 0x9}) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c000107000000000002000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x6, 0x800) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f00000002c0)) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:41 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") prctl$PR_SET_DUMPABLE(0x66, 0x20000003) 23:25:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 785.975754][T28558] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:42 executing program 5: r0 = syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x2, 0x100) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a01bad472d07ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x10efd2b95dd8ef7c, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x1, 0x0, 0x100, 0x2, {0x8, 0x1f, 0xe83, 0x8}}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x18) 23:25:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x40080, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000002c0)=0x3, 0x4) r5 = socket(0x10, 0x80002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x28}}, {0xa, 0x4e24, 0x80000001, @empty, 0x8}, r6, 0xffffd9fb}}, 0x48) sendmmsg$alg(r5, &(0x7f0000000140), 0x332, 0x0) 23:25:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) 23:25:42 executing program 2: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) 23:25:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001070000", @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r5, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)="53af7f1f0a469ef39534f5ac2827ed2552ef4d927e02c83b2ed6b14a70f95b32b93aa69ae8518ed40ff13b5d239c438621fedf4c22d6d5c9f951b195bb97d9864a42bb348c1b0df9702da7ac4c867372b6fdfcce84df98dea85a164d16d4cbf24a18152b357a43b58bb808b98051d78a90e844a1a5ebc3af1d3b3830a760085d6824933d77ceaaa23d9e0865762eb14aa685fba5a8737cfb", 0x98}, {&(0x7f0000000340)="c9907929efba3ca43a26ee0277997adcec6cf40fdb7fe57c4993a9af45984e55d290d77ae2a7d1d3fddf2483534eed208d1a1ec66b4fe68615ff9b797c", 0x3d}, {&(0x7f0000000380)="5814ef0a09d544544e55723ae2eb05957033f27af4260103d3ad37b5318eb0279a310f668d87746377f2e6aa836b0df71ff48566fc3b776e310058a8129b677b49a6c3016114ff5a77e5b82b74631fe891d95f669e8395e4d24743", 0x5b}], 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, 0x0, 0x46) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) sendfile(r2, r3, 0x0, 0xfffffffd) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x18, 0x1, 0x8, 0x2d, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_address={0x5, 0x15, 0x3c, 0x20, 0x0, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, @sadb_x_sec_ctx={0x13, 0x18, 0x15, 0x80, 0x8f, "dcaedd852cae3fab28f5f43919f31538661aeee2dd72653dde9eaaf7b87e6d9647dc6dccf5ae8f7292fac9c0102c90b2688e8d8f83a7c4e6dd5110322113428e2d8d26977d3f3170f45f4da29360c98ef5cd2324d794a867547fdc193b47c0a50ca34b8f2472161a0421e7c99f88be00d73cca008e87b6987e90d6915c8f1695fd3fa140f0c8da5c100f72ee4a6ca7"}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2d, 0x3505}, @sadb_ident={0x2, 0xa, 0x9, 0x0, 0xf5c}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd29, 0x3502}, @sadb_x_policy={0x8, 0x12, 0x2, 0x7, 0x0, 0x0, 0x8f88, {0x6, 0x32, 0x1f, 0xfa, 0x0, 0x7ff, 0x0, @in6=@local, @in=@broadcast}}, @sadb_ident={0x2, 0xb, 0x7, 0x0, 0x8a2}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x168}}, 0xc2f5edf869255f5f) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:42 executing program 4: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0x0, 0x51}, 0x20) tkill(r0, 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:25:43 executing program 5: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) r0 = socket$key(0xf, 0x3, 0x2) ioctl$void(r0, 0x0) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) write$binfmt_aout(r3, &(0x7f00000002c0)={{0xcc, 0x1f, 0x7f, 0x30, 0x15b, 0x1, 0x2e3}, "f0ca43fe3b12bb24f369eebf91e54fdee998c4c2a226360bf40d380a69171cecccb305da91f68cf60e2fcb19218ff7", [[]]}, 0x14f) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) pause() sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) r7 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)={0x1f, 0x1, 0x1, 0x5, 0x282, 0xffffffffffffffff, 0x100, [], r6, r7, 0x1, 0x5}, 0x3c) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3]}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmmsg$alg(r8, &(0x7f0000000140), 0x332, 0x0) [ 787.049782][T28637] ptrace attach of "/root/syz-executor.4"[28636] was attempted by "/root/syz-executor.4"[28637] 23:25:43 executing program 4: creat(0x0, 0x0) setxattr$security_selinux(0x0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:usbmon_device_t:s0\x00\xe8m\xc2X\xbd\x8a\a\xa4\x00\xddg\x8fW\f\x8e\xcb\xcc\x9d[w\xd5\xc6|P_\xfd\x1b\x86\x8ft\xd2\a\"\xfc\xea\x9c\xc4\xf5t\xfc1%V\xd3\xe1\xa0V7\xea8\xdf\no\xa7L\"1\x02\xec\x83\rrw\xd4J\xaa\xee\xf6\x99\x11\x83\xa2Z_\xbe\xe2\xb0\x90\xc0a\xadY\xe0\xd6N\x972\x98OP\xc4b\x9b\x9f\xaf/kH\xc5\xdaW\xb1\xff\xb5\x1b\xe0\xdb\x008\x84\x16\xf5#\x94\xd2\xdfn\xc0\xfb\xde\xf1\x9e\xef\x1b\x84H\x8a\x96io\xbf', 0xa8, 0x0) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r1 = memfd_create(&(0x7f0000000140)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockname$unix(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000640)={0x1, &(0x7f00000006c0)=[{}]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) fallocate(r0, 0x11, 0x0, 0x100000001) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 23:25:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000440)=""/4096) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000938fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff020000000000000000000000400001000000000000000008e3e4fa4a8e965d82dc15d06acd727dc715f3499b2785f52ee1b6514db2e5fcb51812fb6df502224b573aa007"], 0x98}}, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x46) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0xa2) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0xfffffffd) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, [0x4e2, 0x200, 0x8, 0xffffffffffffff3f]}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0x9, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x30, 0x4f]}}, &(0x7f0000000040)=""/46, 0x28, 0x2e, 0x1}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f00000001c0)={0x20000001}) fcntl$getownex(r4, 0x10, &(0x7f0000000200)={0x0, 0x0}) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x9, 0x3, 0x1000}, 0x4) ptrace$getregset(0x4204, r6, 0x202, &(0x7f00000002c0)={&(0x7f0000000240)=""/74, 0x4a}) 23:25:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001070000", @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000180)=0x4) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) 23:25:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000300)="11dca50d5c0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0xd, 0x1, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x20) 23:25:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:43 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r0, &(0x7f0000fea000/0x3000)=nil, 0x7000) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="132f03872ab8f51bd903e0ad07d0fb43078b6c8fc235183c23382efb597adc61c605747ccb54dd0a7ec513aca08118c4daa26020f7db74fd5688dbda0033a584f9649b753f64e0090f8aa814a1f9e43168bf56739a2926303a1f597dbf42b8df7ce25fc540479f212782dd103d9cf9438c8f0129d441fd2b0382cc3e81a7c11197e59315", 0x84, 0xfffffffffffffffa) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x46) r4 = dup(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) sendfile(r4, r5, 0x0, 0xfffffffd) ioctl$HIDIOCGRAWPHYS(r5, 0x80404805, &(0x7f0000000400)) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="9669c915fa435347d157813eccbd30bd6b3cc8aee078962d161ec8ace353105f589dbb6e4933683af84ecb4504d08cea49d56ee11cb7af9868cc50f6a5b8787ce7d1e53cd656872e4bb0bf683f957f4b1afd2c7ea1d13e941ecceadfacb437a4eccd4ca04269e0713e6f4844242ff1f1bfb0f1fcca5700c1cb7703f0a7a5bb53915fd9965040312c60e70dc6634d62", 0x8f, 0xfffffffffffffffb) ioctl$RTC_PIE_OFF(r4, 0x7006) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r6}, &(0x7f0000000380)=""/88, 0x58, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r7}) sendmsg$key(r8, &(0x7f0000000180)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[]}}, 0x800) 23:25:43 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000300)) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x2ef}}, 0x20000000) 23:25:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c0001070000", @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x46) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) r7 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0xffffffffffffd) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7}}, @TCA_CBQ_RTAB={0x404}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettfilter={0x24, 0x2a, 0xffffff1f, 0x0, 0x0, {0x0, r12}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b40)=@newtaction={0x158c, 0x30, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{0x1038, 0x1, @m_sample={0x1034, 0x1c, {{0xc, 0x1, 'sample\x00'}, {0x1c, 0x2, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8001, 0xc00000, 0x8, 0x4, 0x1ff}}]}, {0x1004, 0x6, "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"}}}}, {0x110, 0x1, @m_tunnel_key={0x10c, 0xa, {{0x10, 0x1, 'tunnel_key\x00'}, {0x1c, 0x2, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x8, 0x9, 0x4e20}]}, {0xd8, 0x6, "ffa1e34d9b1db4631fe1a0ea0128226e62ef16ed14ba67fbb59b027d4d915c6823557d8601b52238deb234673a36ae9cf7442a770e76b8c7632542a3a58ada21a31adadd7b844adbbfd3d64b203d446984ace71e8baad84b7ced1dde4d8f78896a4191a8c0a105c11e5b31d22bebe1496264824412c18276f332fb0158ad67b7d7113f5ae865a7e08c715efe9b49abc060e44e86536dd6f8b848f2ee50e17dc040eaad34562bc3da14ce1944e505153c2bf2f5c00a38241b9ce6b308835598e373e6326c08589755ef121d729d8056aa94"}}}}, {0x88, 0x1, @m_connmark={0x84, 0x9, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x0, 0x8, 0x80000000, 0x9}, 0x9}}}, {0x4c, 0x6, "fba5969f82ba2cc2f574917b32f73028b22add27e39226c342b61273d7a95dabb12b5cd24767481462be3a44dd2a396d3079494181fdb457908b11ada8f440b2b908ef8e76"}}}}, {0xf0, 0x1, @m_gact={0xec, 0xa, {{0xc, 0x1, 'gact\x00'}, {0x10, 0x2, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x420, 0x4}}]}, {0xc8, 0x6, "72b7ec011eaa84ac19585bb7b3b936bb96ec081c1916b3421f92e8533c7ed131a3e39620ceabae7655af7b83603f196fa5ff415a551dd606e4bb96fdf01ce0df39b6c88030d1fe86890217f6927eb1b0c7446880375075c815294a9fa350e4807c59cf83ddf03afa7c3d3c9084c1c1a9111c7372e5e301fbcaea7387002cafd74de8030c1a04ecd0e999287c83acf142ee67e0f692b2f321e9766131949633b2678a879a2973546f1cec73ac322ac02d1e5685fe6e4c71ee4f8a2c9643daf4b54549524e"}}}}, {0x80, 0x1, @m_skbedit={0x7c, 0xe, {{0xc, 0x1, 'skbedit\x00'}, {0x44, 0x2, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x3, 0x1, 0x8001, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0xff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0xfff1}}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x2}]}, {0x24, 0x6, "48bbfaced033d4a603ef3364eca8cff45e34004a9323ba4185a31bccd57bfd"}}}}, {0x144, 0x1, @m_ife={0x140, 0xb, {{0x8, 0x1, 'ife\x00'}, {0xa0, 0x2, [@TCA_IFE_DMAC={0xc}, @TCA_IFE_SMAC={0xc, 0x4, @broadcast}, @TCA_IFE_DMAC={0xc, 0x3, @random="c9f390481a1c"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x20000000, 0x36}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0x8, 0x8, 0x2, 0xf553}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xda, 0x1, 0x8001, 0x6}, 0x1}}, @TCA_IFE_SMAC={0xc, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_TYPE={0x8, 0x5, 0x8}]}, {0x90, 0x6, "31e9a849992d9e61d1e329b0e331faf3edba0e7bef45bf6d6663cd511cf3f257ee41946ce532d79d847c1f178e2d340d31e596d154d9a2a73268020f642113f1cd48c608963e7ccaf9e656a1189b1dbb65ad6da9cad208618eae4a8c14216f99152e2d797e703ef6d6c36743f7a1a85e4a20e81c3943e286b8d8c4b680388c33924203a05e89758712f6d5"}}}}, {0x40, 0x1, @m_skbedit={0x3c, 0x1, {{0xc, 0x1, 'skbedit\x00'}, {0xc, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x2}]}, {0x1c, 0x6, "424e9f10db3a110c7287c1fa4300e0a860ff8cfd7665"}}}}, {0xb4, 0x1, @m_mirred={0xb0, 0x1, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x7, 0x5}, 0x4, r12}}}, {0x78, 0x6, "664cc2f4ac5ace28eeda91bd9b88261a2383d55be4b8c0118f3b0dcc141a747227548b8bef1a50c2c5a9bb20970b7be9e4a91aa06e66d7b94160a3b36d1492ec491c66be5933093309951a555ea1904a3a003560ca37034f90ed0ebd8fbbe7d7050345884f1eab63fa15c6fcfa7f31b034ef954e"}}}}]}, 0x158c}, 0x1, 0x0, 0x0, 0x20002000}, 0x800) ftruncate(r6, 0x10099b7) sendfile(r5, r6, 0x0, 0xfffffffd) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000280)={0x6, 0xbc, "3811c9174f0572a4b3f71f5ace0665ee9b1d5f0882f350d461d80191a21a96f1ef0bd845ae71755a13aa8c34086cdf9b9612a117804e2f821f284aefd1b0a19a1050353343678eeba3596bec497cc0e3880b172fa236d55a5e34d52204d38668832652ff675c0a8cb6bfcf84c6b9cf6af0b81636afae8ef5d9cb0c070df262eb336e43998f259d34fa1ca2e4bc6d1c7962d765895add4b1da85f6b34f0064b9a688f621544fc43bb09b991748f3938040996d8aaa0148a7d6e028690"}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)=ANY=[@ANYBLOB="440400002400070500008f0caed3034200"/26, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100636271001804020004040600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r13 = socket(0x10, 0x80002, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xdf0e693cbf8e2991, r7, 0x180000000) sendmmsg$alg(r13, &(0x7f0000000140), 0x332, 0x0) 23:25:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000313000000000000000000000005000600000000000a000000e08b000000ffff0000000000000000050009e24a000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff02000000000000000000000040000100"/148], 0x98}}, 0x0) 23:25:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000300)) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:44 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000580)=""/159, 0x9f}], 0x6}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000300)) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000004000010000000000000000"], 0x98}}, 0x0) r1 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x46) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r3, r4, 0x0, 0xfffffffd) ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000000)={{0x465cc2aa35bfb09e, @name="362e32e5cecd384f8cadad5d1f081dbead5fe4721ea77de658a2259f8adc5d80"}, 0x8, 0x8, 0x7}) shmctl$SHM_UNLOCK(r1, 0xc) 23:25:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000e00001000"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x39, 0x0, &(0x7f00007d0000)=0xfffffee9) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000480)) rt_sigaction(0x33, &(0x7f0000000380)={&(0x7f0000000300)="660f383a9d1fbbc0e5c442d902c3c93647c06e6b0b26f247ad8f29b89803660f3a0e32e8c4217f2c9d000000006743d9f845140f", {}, 0x10000000, &(0x7f0000000340)="c4e2d108249fc401f828b8c4000000c42109d16a00660f7d4500c4a1dd5701660f58340cc481fd6fcadd3b470f05c46225397903"}, 0x0, 0x8, &(0x7f00000003c0)) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000004c0)={r7, 0xf5, "c7a1920029ff113b5ac62c19444b447aab15bcf2aeaca2a71be0ce3da931c45eec6b909bd7a9b2b75148ccc785d35f8938b6e3f5f94cf78f0bc2b3bcfb3bf6cb68845de4efd825faf6a8331c38eaaa42932ae4ddc3c75fb20c82b5bdd23006b18f563c5f1cfb6c5f0e436eac709e1e177ecdfd6c2ff887fd6bed56e3b42137a95d623817e6ccb2cd6a2ecac9ea467ad48cfe6b2d907cd0e39243df70264131695d3d7e3b3243492e1b77d870e490d905f55d23bcd3ed307208cf96aaddfa86065e33718221e9b3ad754ed7f0d99ca29ead5a7beb53ffb69aed9090c358ad7be94dd6f33132b54cf2807c5fcb8382fad3f7a8041088"}, &(0x7f00000005c0)=0xfd) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000600)={r8, 0x7fdc, 0x5, 0x2}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000280)={{0x2, 0x4e20, @loopback}, {0x1}, 0x40, {0x2, 0x4e20, @broadcast}, 'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440400002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001006362710018040200040406000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086930b30a600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000050022000000000000007f000000"], 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x34}}, 0x0) r10 = socket$inet(0x10, 0x2, 0x0) sendmsg(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000440)={0x5, 'team0\x00', 0x2}, 0x18) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f0000000140), 0x332, 0x0) 23:25:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x800000a9c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r1, &(0x7f0000000100), 0x1ede5) r3 = accept(r0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x3fffffffffffcb2, 0x0, 0x0) 23:25:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000300)="11dca50d5c0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={r1, 0xd, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) 23:25:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x10001, {{0x2, 0x4e21, @empty}}}, 0x88) r2 = shmget$private(0x0, 0x13000, 0x0, &(0x7f0000feb000/0x13000)=nil) shmat(r2, &(0x7f0000fea000/0x3000)=nil, 0x7000) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES64=r2], 0x8}}, 0x44040802) [ 788.938006][T28748] __nla_validate_parse: 5 callbacks suppressed [ 788.938031][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 788.963509][T28757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:25:45 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x2710}}, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = open(0x0, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00') setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000300)=0x100000001, 0x4) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(0x0, 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) r5 = dup(r4) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000080)={0x1}) ioctl$RTC_AIE_ON(r5, 0x7001) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000500)={'sit0\x00\x00\x00\x00\x00\x00@\xd6\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'sit0\x00\x00\xff\xff\xff\xff\xa0\x00Q\xfc\x03\x00', 0x141}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.max\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f00000001c0)=0xc000ffd, 0x10a000d02) [ 789.044085][T28752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.097345][T28766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 789.138368][T28752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a000000000000000000000000e08b000000ffff00000000000000000000000005000900fd000000d7a0eaad472d40ef00000000000000df854936000002000200000000000e00000200010000000000000000fd0000000005000500000000000a00000000000000ff020000000000000000000000400001000000000000000037a92d74c9838794c3422fb41c236dd239740a13e2ff195584d6c5cdc9a4ccf7"], 0x98}}, 0x0) [ 789.218178][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 23:25:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002c00010700000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000f6fff1ff0c000100746369ab6db14663708d9800"], 0x3}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x332, 0x0) 23:25:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 23:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468000000e1170002de1300010028b60000", @ANYRES32=0x0, @ANYBLOB="00000000000000a2"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x444, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8, 0x1, 'cbq\x00'}, {0x418, 0x2, [@TCA_CBQ_RTAB={0x404}, @TCA_CBQ_RATE={0x10, 0x5, {0x22, 0x0, 0x0, 0x0, 0x0, 0x7f}}]}}]}, 0x444}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="0000040000000000f6fff1ff0c000100746369ab5b9f8af5fa5584dc5430716db14663708d9800"], 0x34}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x332, 0x0) 23:25:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[]}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x100, 0x8, 0x8, 0x8, 0x2}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f610500020000001f000000001008000800100004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000040)="56fb1058d9ccc46ef007ba70", 0xc) [ 789.591162][T28779] device sit0 entered promiscuous mode [ 789.648327][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 23:25:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x2, 0xb1b4905c840bc194, 0x2f) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000134000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=@random={'user.', 'sit0\x00'}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x375) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3, 0x18, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) fsetxattr$security_capability(r3, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r6 = creat(0x0, 0x0) close(r6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r9) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 789.695724][T28794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 789.706757][T28794] ===================================================== [ 789.713728][T28794] BUG: KMSAN: uninit-value in vsnprintf+0x218f/0x3210 [ 789.720504][T28794] CPU: 0 PID: 28794 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 789.728396][T28794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.738454][T28794] Call Trace: [ 789.741757][T28794] dump_stack+0x191/0x1f0 [ 789.746108][T28794] kmsan_report+0x13a/0x2b0 [ 789.750633][T28794] __msan_warning+0x73/0xe0 [ 789.755144][T28794] string+0x4be/0x600 [ 789.759132][T28794] vsnprintf+0x218f/0x3210 [ 789.763567][T28794] __request_module+0x2b1/0x11c0 [ 789.768516][T28794] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 789.774590][T28794] tcf_proto_lookup_ops+0x171/0x700 [ 789.779780][T28794] tc_new_tfilter+0x2ebd/0x4ce0 [ 789.784668][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 789.790545][T28794] ? tcf_block_offload_unbind+0xa50/0xa50 [ 789.796252][T28794] ? tcf_block_offload_unbind+0xa50/0xa50 [ 789.801964][T28794] rtnetlink_rcv_msg+0xcb6/0x1580 [ 789.806986][T28794] ? do_syscall_64+0xbc/0xf0 [ 789.811575][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 789.817463][T28794] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 789.823518][T28794] ? rhashtable_jhash2+0x3a9/0x4d0 [ 789.828627][T28794] ? kmsan_internal_set_origin+0x6a/0xb0 [ 789.834256][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 789.840145][T28794] netlink_rcv_skb+0x431/0x620 [ 789.844899][T28794] ? rtnetlink_bind+0x120/0x120 [ 789.849746][T28794] rtnetlink_rcv+0x50/0x60 [ 789.854191][T28794] netlink_unicast+0xf6c/0x1050 [ 789.859047][T28794] netlink_sendmsg+0x110f/0x1330 [ 789.863990][T28794] ? netlink_getsockopt+0x1430/0x1430 [ 789.869348][T28794] ___sys_sendmsg+0x14ff/0x1590 [ 789.874203][T28794] ? kmsan_internal_set_origin+0x6a/0xb0 [ 789.879826][T28794] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 789.885887][T28794] ? __fget_light+0x6b1/0x710 [ 789.890992][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 789.896879][T28794] __sys_sendmmsg+0x53a/0xae0 [ 789.901566][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 789.907448][T28794] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 789.913517][T28794] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 789.919585][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 789.925482][T28794] __se_sys_sendmmsg+0xbd/0xe0 [ 789.930241][T28794] __x64_sys_sendmmsg+0x56/0x70 [ 789.935078][T28794] do_syscall_64+0xbc/0xf0 [ 789.939486][T28794] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 789.945364][T28794] RIP: 0033:0x459a29 [ 789.949252][T28794] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.968845][T28794] RSP: 002b:00007f2708a8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 789.977272][T28794] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 789.985231][T28794] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 [ 789.993188][T28794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 790.001157][T28794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a8b6d4 [ 790.009115][T28794] R13: 00000000004c722e R14: 00000000004dca80 R15: 00000000ffffffff [ 790.026028][T28794] [ 790.028340][T28794] Uninit was created at: [ 790.032570][T28794] kmsan_internal_poison_shadow+0x53/0x100 [ 790.038372][T28794] kmsan_slab_alloc+0xaa/0x120 [ 790.043141][T28794] __kmalloc_node_track_caller+0xb55/0x1320 [ 790.049033][T28794] __alloc_skb+0x306/0xa10 [ 790.053447][T28794] netlink_sendmsg+0x783/0x1330 [ 790.058292][T28794] ___sys_sendmsg+0x14ff/0x1590 [ 790.063130][T28794] __sys_sendmmsg+0x53a/0xae0 [ 790.067798][T28794] __se_sys_sendmmsg+0xbd/0xe0 [ 790.072551][T28794] __x64_sys_sendmmsg+0x56/0x70 [ 790.077387][T28794] do_syscall_64+0xbc/0xf0 [ 790.081791][T28794] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 790.087668][T28794] ===================================================== [ 790.094579][T28794] Disabling lock debugging due to kernel taint [ 790.100720][T28794] Kernel panic - not syncing: panic_on_warn set ... [ 790.107297][T28794] CPU: 0 PID: 28794 Comm: syz-executor.3 Tainted: G B 5.3.0-rc7+ #0 [ 790.116556][T28794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.126594][T28794] Call Trace: [ 790.129880][T28794] dump_stack+0x191/0x1f0 [ 790.134205][T28794] panic+0x3c9/0xc1e [ 790.138113][T28794] kmsan_report+0x2a2/0x2b0 [ 790.142612][T28794] __msan_warning+0x73/0xe0 [ 790.147104][T28794] string+0x4be/0x600 [ 790.151087][T28794] vsnprintf+0x218f/0x3210 [ 790.155520][T28794] __request_module+0x2b1/0x11c0 [ 790.160457][T28794] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 790.166615][T28794] tcf_proto_lookup_ops+0x171/0x700 [ 790.171833][T28794] tc_new_tfilter+0x2ebd/0x4ce0 [ 790.176723][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 790.182616][T28794] ? tcf_block_offload_unbind+0xa50/0xa50 [ 790.188320][T28794] ? tcf_block_offload_unbind+0xa50/0xa50 [ 790.194041][T28794] rtnetlink_rcv_msg+0xcb6/0x1580 [ 790.199061][T28794] ? do_syscall_64+0xbc/0xf0 [ 790.203653][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 790.209538][T28794] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 790.215594][T28794] ? rhashtable_jhash2+0x3a9/0x4d0 [ 790.220700][T28794] ? kmsan_internal_set_origin+0x6a/0xb0 [ 790.226328][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 790.232215][T28794] netlink_rcv_skb+0x431/0x620 [ 790.236970][T28794] ? rtnetlink_bind+0x120/0x120 [ 790.241828][T28794] rtnetlink_rcv+0x50/0x60 [ 790.246234][T28794] netlink_unicast+0xf6c/0x1050 [ 790.251088][T28794] netlink_sendmsg+0x110f/0x1330 [ 790.256030][T28794] ? netlink_getsockopt+0x1430/0x1430 [ 790.261390][T28794] ___sys_sendmsg+0x14ff/0x1590 [ 790.266242][T28794] ? kmsan_internal_set_origin+0x6a/0xb0 [ 790.271866][T28794] ? kmsan_internal_unpoison_shadow+0x42/0x80 [ 790.277926][T28794] ? __fget_light+0x6b1/0x710 [ 790.282597][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 790.288480][T28794] __sys_sendmmsg+0x53a/0xae0 [ 790.293164][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 790.299047][T28794] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 790.305119][T28794] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 790.310827][T28794] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 790.316712][T28794] __se_sys_sendmmsg+0xbd/0xe0 [ 790.321469][T28794] __x64_sys_sendmmsg+0x56/0x70 [ 790.326317][T28794] do_syscall_64+0xbc/0xf0 [ 790.330727][T28794] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 790.336610][T28794] RIP: 0033:0x459a29 [ 790.340493][T28794] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 790.360348][T28794] RSP: 002b:00007f2708a8ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 790.368749][T28794] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a29 [ 790.376881][T28794] RDX: 0000000000000332 RSI: 0000000020000140 RDI: 0000000000000006 [ 790.384840][T28794] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 790.396014][T28794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2708a8b6d4 [ 790.403972][T28794] R13: 00000000004c722e R14: 00000000004dca80 R15: 00000000ffffffff [ 790.413509][T28794] Kernel Offset: disabled [ 790.417884][T28794] Rebooting in 86400 seconds..