'./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:32 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:32 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:32 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052e82c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2212.547031][T12266] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2212.557733][T12266] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:32 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2212.648575][T12270] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2212.661081][T12270] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:33 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:34 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2215.253652][T12266] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2215.265594][T12266] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2215.286200][T12283] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:34:35 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37350c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:35 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2215.535949][T12283] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2216.777683][T12314] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2216.788508][T12314] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2216.808530][T12316] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2216.817915][T12316] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:36 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:36 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:36 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:36 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052f82c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:36 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2217.428386][T12338] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
02:34:37 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2217.482037][T12338] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2217.511929][T12344] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2217.521294][T12344] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:37 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:37 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:38 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:38 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa608}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2218.948378][T12338] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2218.965891][T12338] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:38 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e370418188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2219.068017][T12357] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2219.500512][T12357] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2220.034412][T12384] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2220.043428][T12384] netlink: 206776 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:39 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053082c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:39 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:39 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:39 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:40 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x36000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:40 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:40 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8a0a0000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:40 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:41 executing program 1:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2221.472030][T12412] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2221.481262][T12412] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2221.641953][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.648536][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
02:34:41 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e370435188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2222.813635][T12441] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2222.843738][T12441] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2222.860994][T12445] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2222.870915][T12445] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2223.290498][T12441] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2223.298961][T12441] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:43 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053182c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:43 executing program 1:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:43 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x600300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:43 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:43 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c0c8000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2223.601536][T12472] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2223.622684][T12472] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
02:34:43 executing program 1:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2223.713338][T12472] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:43 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2223.923420][T12477] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:34:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2223.980578][T12477] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:44 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:44 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(0x0, 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:44 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2225.849711][T12472] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2225.863689][T12472] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
[ 2225.872878][T12472] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2225.884614][T12502] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2225.894275][T12502] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:46 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053282c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(0x0, 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:46 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c358000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2226.593488][T12533] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2226.602463][T12533] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(0x0, 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:47 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2227.566035][   T37] audit: type=1804 audit(1620786887.394:24): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/2152/file0/bus" dev="sda1" ino=13938 res=1 errno=0
02:34:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:47 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2228.097002][   T37] audit: type=1804 audit(1620786887.924:25): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/2153/file0/bus" dev="sda1" ino=13938 res=1 errno=0
[ 2228.928817][T12526] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2228.947192][T12526] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2229.287567][T12531] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2229.303659][T12531] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2229.657751][T12557] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2229.702292][T12557] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:49 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:49 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:49 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053382c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:49 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:49 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188002f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:49 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2230.130646][   T37] audit: type=1804 audit(1620786889.954:26): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/2154/file0/bus" dev="sda1" ino=13938 res=1 errno=0
02:34:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2230.397772][T12600] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2230.486415][T12600] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:50 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:50 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2232.413108][T12611] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2232.421322][T12611] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2232.788914][T12612] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2232.813840][T12612] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:53 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053482c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(0x0, 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:53 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188004f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2233.360887][T12682] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2233.397642][T12682] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(0x0, 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:53 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(0x0, 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2235.414798][   T37] audit: type=1800 audit(1620786895.244:27): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=13931 res=0 errno=0
[ 2236.163212][T12681] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2236.181192][T12681] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:56 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137353e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:56 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x7000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:56 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:56 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188008f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2236.840434][T12747] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2236.871134][T12747] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:57 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2237.550481][   T37] audit: type=1800 audit(1620786897.374:28): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=13931 res=0 errno=0
02:34:57 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:57 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2240.007174][T12749] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2240.021182][T12749] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:00 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37100c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:00 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:00 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:00 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:00 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2240.366125][T12787] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2240.396958][T12787] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:01 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c18800ef01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:01 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:01 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2241.230322][T12820] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2241.250757][T12820] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2241.831721][T12846] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2241.840410][T12846] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2243.151873][T12820] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2243.160091][T12820] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:03 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37350c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:03 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:03 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:03 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188060f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2243.454513][T12880] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2243.466686][T12880] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2243.497403][T12879] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2243.551701][T12879] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2245.296027][T12880] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2245.311177][T12880] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2245.325426][T12907] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
02:35:05 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:05 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:05 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:05 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:05 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2245.337772][T12907] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2246.565448][T12937] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2246.577425][T12937] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2246.595657][T12943] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:35:06 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f03500d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:06 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:06 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:06 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2246.618436][T12943] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:06 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e370435188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2247.046559][T12963] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2247.068257][T12963] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:08 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2249.364870][T12966] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2249.376664][T12966] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:09 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01702d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2249.443401][T12996] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2249.789231][T12996] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2249.814961][T13016] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2249.834760][T13016] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:09 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c0e8000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2251.568986][T13036] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2251.581831][T13047] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2251.638417][T13053] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2251.681857][T13053] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:11 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01704d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:11 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:11 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa6080000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:11 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:11 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c358000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2252.306918][T13080] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2252.392496][T13080] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:13 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:13 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2254.127788][T13084] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2254.142889][T13084] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:14 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188002f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:14 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01708d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:14 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2254.743610][T13145] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2254.753142][T13145] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2257.201544][T13143] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2257.211296][T13143] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:17 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2257.945056][T13145] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2257.971526][T13145] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:18 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f0170ed1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188004f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:18 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:18 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2258.543779][T13221] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2258.555454][T13221] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, 0x0, 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:19 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:19 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, 0x0, 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:20 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:20 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8a0a000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2261.487361][T13225] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2261.497230][T13225] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2261.835370][T13230] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2261.857867][T13230] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2262.195565][T13251] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:35:22 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01760d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:22 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, 0x0, 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2262.239040][T13251] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2263.445840][T13292] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2263.455060][T13292] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:23 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:23 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:23 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188007f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:23 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:24 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:24 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2264.956449][T13303] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2265.054233][T13303] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2265.650602][T13325] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2265.661595][T13325] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:25 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xf}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:25 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:25 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:25 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2266.575500][T13339] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2266.608986][T13339] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:26 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188008f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:26 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:26 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xec0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2267.261324][T13405] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2267.388143][T13405] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:27 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:27 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:28 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2269.861819][T13423] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2269.935996][T13423] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:30 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c18800ef01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:30 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffffffffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:30 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:30 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:30 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x34000}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2270.579228][T13463] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2270.637601][T13463] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:31 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:31 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:31 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:32 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2274.014640][T13496] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2274.047784][T13496] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:34 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188023f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:34 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x20034020}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2274.627656][T13526] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2274.648552][T13526] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:35 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x7ffff000}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2277.919826][T13522] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2277.931624][T13522] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2278.261535][T13527] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2278.269756][T13527] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2278.607064][T13560] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2278.651980][T13560] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:38 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188060f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:38 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:38 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:38 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2279.167198][T13605] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2279.183749][T13605] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:35:39 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:39 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:40 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2282.987876][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2282.994301][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2285.380428][T13617] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2285.419979][T13617] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2286.191074][T13609] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2286.211430][T13609] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:46 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f03500d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:46 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2287.060821][T13611] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2287.078730][T13611] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2291.176544][T13674] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2291.189253][T13674] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:51 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x3}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:51 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:51 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x700000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2292.524267][T13676] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2292.542973][T13676] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2292.888380][T13704] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2292.900282][T13704] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:35:52 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01702d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:52 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:52 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:52 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2293.603277][T13710] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2293.616256][T13710] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2294.006336][T13711] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2294.032638][T13711] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2294.382251][T13754] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2294.390481][T13754] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:54 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:54 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r0, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2295.649153][T13800] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2295.662753][T13800] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:55 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01704d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r0, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:55 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r0, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2296.954884][T13798] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2296.972866][T13798] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2297.547468][T13801] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2297.571798][T13801] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2297.931485][T13816] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2297.940266][T13816] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2298.357262][T13836] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2298.366072][T13836] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:58 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:58 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:58 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2299.330786][T13897] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2299.340065][T13897] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:35:59 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01707d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:59 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2300.690565][T13901] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2300.701243][T13901] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2301.100614][T13930] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2301.116643][T13930] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2301.475450][T13938] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2301.490933][T13938] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2301.863669][T13943] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2301.873464][T13943] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:01 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x35}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:01 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:01 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:02 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2303.087109][T13993] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2303.103192][T13993] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:03 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01708d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:03 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x600}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2304.422529][T14005] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2304.652217][T14005] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2305.541101][T14028] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2305.550703][T14028] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:05 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:05 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2306.227988][T14040] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2306.261171][T14040] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2306.710439][T14074] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2306.727710][T14074] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:06 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f0170ed1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:06 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa608000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:06 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffff1f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:06 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2308.375029][T14087] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
02:36:08 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2308.488725][T14087] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2309.099251][T14107] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2309.116105][T14107] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:09 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xa8a}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2309.720790][T14154] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2309.735232][T14154] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:09 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01723d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:09 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffc90000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:11 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:11 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2312.001325][T14176] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2312.024801][T14176] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2312.509622][T14155] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2312.554001][T14155] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:12 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:12 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:12 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffffffffff000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:12 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01760d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2313.210195][T14233] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2313.311690][T14233] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:13 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:13 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2315.726778][T14244] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2315.744121][T14244] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2316.138449][T14254] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2316.166287][T14254] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2316.504855][T14246] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2316.531142][T14246] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:16 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:16 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:16 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xf}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2316.863812][T14277] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
02:36:17 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2317.146015][T14277] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2318.218877][T14325] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2318.228717][T14325] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:18 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:18 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xec0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2319.501502][T14335] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2319.509729][T14335] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2319.921191][T14358] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2319.929808][T14358] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:19 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:19 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:19 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:19 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:19 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x34000}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:20 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2321.340653][T14365] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2321.690106][T14365] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2322.170727][T14397] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2322.179239][T14397] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:22 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:22 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:22 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:22 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x20034020}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:23 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:23 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:23 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:23 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x7ffff000}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2323.535505][T14439] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2323.561180][T14439] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2324.927430][T14441] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2324.943359][T14441] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2325.297795][T14470] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2325.321620][T14470] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:25 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x7}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:25 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:25 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa65}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:25 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x2}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2326.576646][T14476] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2326.641719][T14476] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2327.051642][T14506] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2327.059876][T14506] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:26 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:26 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:26 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:27 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2328.396555][T14511] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2328.414089][T14511] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2328.812989][T14513] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2328.842315][T14513] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2329.233821][T14520] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2329.250425][T14520] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2329.634985][T14545] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2329.643513][T14545] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:29 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:29 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:29 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:29 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:29 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x3}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:29 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2330.510852][T14611] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2330.520242][T14611] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:30 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8a0a}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:30 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:30 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:31 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2331.915659][T14614] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2331.931876][T14614] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2332.335831][T14643] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2332.353287][T14643] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2332.746046][T14639] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2332.761943][T14639] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2333.153541][T14623] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2333.170292][T14623] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2333.554440][T14645] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2333.563246][T14645] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:33 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:33 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:33 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x8}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:33 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2334.834545][T14720] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2334.854207][T14720] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:34 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:34 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x650a}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2337.005662][T14716] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2337.021587][T14716] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2337.369445][T14752] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2337.381573][T14752] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2337.741180][T14739] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2337.780328][T14739] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2338.154992][T14740] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2338.163560][T14740] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:38 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:38 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:38 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x36000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:38 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x35}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2338.719441][T14818] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2338.730247][T14818] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:40 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:41 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:41 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2344.427221][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.433741][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.663759][T14825] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2345.681495][T14825] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:46 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:46 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x500}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2346.818179][T14883] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2346.903118][T14883] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:46 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x600300}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:46 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x36000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:47 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffff1f}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:47 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:48 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:48 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2349.425828][T14896] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2349.440949][T14896] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2349.798105][T14919] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2349.841162][T14919] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2350.236239][T14918] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2350.247143][T14918] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:50 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x700}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:50 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:50 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffc90000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2351.427494][T14960] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2351.436058][T14960] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:51 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:51 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x600300}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:51 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:51 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:52 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:52 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2352.984001][T14964] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2353.218814][T14964] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2353.869296][T14990] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2353.887171][T14990] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:53 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8a6}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:53 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x7}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:53 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2354.530378][T14991] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2354.549020][T14991] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2354.906208][T15033] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2354.925530][T15033] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:54 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:54 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:54 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:36:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

[ 2356.616260][T15056] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2356.678390][T15056] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:56 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:56 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

[ 2357.107056][T15066] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2357.131102][T15066] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2358.165815][T15082] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2358.190171][T15082] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2358.638384][T15111] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2358.646825][T15111] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:36:58 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:58 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:58 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:59 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2359.903423][T15150] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2359.917798][T15150] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:59 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:59 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x23}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:59 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:00 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2361.190979][T15151] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2361.201653][T15151] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2361.611144][T15183] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2361.625067][T15183] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:01 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:01 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:01 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:02 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2363.281797][T15192] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2363.290016][T15192] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2363.773025][T15225] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2363.781236][T15225] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:03 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:03 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:03 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2365.065226][T15269] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2365.082886][T15269] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:05 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:05 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:05 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:05 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x700}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:05 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:06 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2367.408553][T15292] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2367.425565][T15292] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2367.957125][T15293] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2367.966870][T15293] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:07 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:07 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x650a0000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:07 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xb3a}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:08 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2369.750285][T15313] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2369.775299][T15313] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2370.314474][T15345] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2370.324118][T15345] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:10 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:10 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:10 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2372.104616][T15354] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2372.130959][T15354] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2372.688646][T15390] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2372.698250][T15390] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:12 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:12 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:12 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2374.120747][T15403] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2374.218333][T15403] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2375.054399][T15433] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2375.063430][T15433] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:14 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:14 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:15 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3a0b}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:16 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:16 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xa608}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2376.560901][T15476] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2376.589178][T15476] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:17 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:17 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2377.948477][T15481] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2377.965241][T15481] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2378.348667][T15504] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2378.361495][T15504] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:18 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:18 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2379.578389][T15518] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2379.684910][T15518] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2380.093776][T15551] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2380.103564][T15551] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:20 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:20 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:20 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:20 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:20 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2381.275724][T15573] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2381.318664][T15573] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2381.722638][T15597] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2381.730891][T15597] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:21 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:21 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x36000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:21 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:21 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:21 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:22 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2383.260738][T15603] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2383.315230][T15603] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2384.159118][T15633] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2384.167489][T15633] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:24 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x36000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:24 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:24 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:24 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x600300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:24 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2385.804429][T15681] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2385.816414][T15681] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:25 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:25 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:25 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:25 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:26 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2387.784604][T15712] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2387.797409][T15712] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:27 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x600300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:27 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:27 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:28 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2389.216398][T15729] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2389.234552][T15729] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2389.589114][T15748] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2389.598583][T15748] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:29 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8a0a0000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:29 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:29 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:29 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:29 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:30 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:30 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2391.207508][T15755] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2391.372677][T15755] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2391.876242][T15787] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2391.884767][T15787] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:31 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:31 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:31 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:31 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:31 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x7000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2393.349167][T15788] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2393.360441][T15788] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:33 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:33 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:33 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:33 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2393.744877][T15834] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2393.761290][T15834] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2395.564223][T15840] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2395.606937][T15840] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2396.145707][T15871] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2396.168488][T15871] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:36 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:36 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:36 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:36 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2397.483060][T15873] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2397.493300][T15873] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2397.879101][T15917] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2397.893024][T15917] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:37 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:37 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:37 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:37 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:37 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:38 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x23000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2399.600163][T15923] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2399.650604][T15923] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2400.068022][T15954] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2400.076348][T15954] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:39 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:39 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:39 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:39 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3a0b0000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2401.551526][T15956] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2401.559756][T15956] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2401.951638][T15998] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2401.959903][T15998] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:41 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:41 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:41 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:41 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:41 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:42 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:42 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2403.644071][T16004] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2403.678237][T16004] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2404.053111][T16034] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2404.061606][T16034] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:43 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:43 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x650a000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:43 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:43 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2405.462711][T16044] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2405.482398][T16044] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2405.862462][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2405.868801][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2405.904681][T16076] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2405.913053][T16076] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:45 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:45 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:45 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:45 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:45 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2407.928319][T16077] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2407.959785][T16077] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2408.465507][T16114] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2408.494661][T16114] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:48 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x7000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:48 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:48 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:48 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:48 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2409.655375][T16163] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2409.681442][T16163] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:49 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:49 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:49 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:50 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:50 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:51 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2411.488803][T16169] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2411.504443][T16169] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2412.220585][T16185] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2412.229237][T16185] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:52 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:52 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:52 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:52 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:52 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2413.120593][T16205] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2413.145431][T16205] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2413.538425][T16239] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2413.547129][T16239] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:53 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:53 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:53 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:53 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2414.901563][T16255] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2414.909805][T16255] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2415.380612][T16275] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2415.389217][T16275] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:55 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:55 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:55 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffffffffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2416.702528][T16279] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2416.711008][T16279] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:56 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:56 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:56 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2417.080481][T16322] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2417.091204][T16322] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:57 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2418.952433][T16327] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2418.978253][T16327] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2419.536452][T16355] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2419.545711][T16355] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:37:59 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:59 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:00 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2421.189275][T16361] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2421.204023][T16361] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2421.746300][T16369] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2421.770365][T16369] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2422.169628][T16375] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2422.178590][T16375] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:02 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x2)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:02 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:02 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:02 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:02 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2422.577624][T16407] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2422.593786][T16407] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:02 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:02 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2424.214374][T16416] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2424.289607][T16416] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2424.708722][T16465] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2424.719353][T16465] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:38:04 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:38:04 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x700000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2425.955533][T16470] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2425.976229][T16470] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2426.541154][T16473] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2426.554691][T16473] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:06 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x4)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:38:06 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:06 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2426.941616][T16484] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2427.014087][T16484] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2428.296889][T16516] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2428.305572][T16516] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:08 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:08 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:08 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2429.391188][T16532] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2429.409256][T16532] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2429.828329][T16562] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2429.839438][T16562] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:38:09 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2431.280893][T16568] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2431.296924][T16568] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2431.751505][T16586] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2431.759736][T16586] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:38:11 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x8)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:11 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:11 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2300000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2432.544756][T16591] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2432.565371][T16591] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2432.996181][T16617] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2433.004726][T16617] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:12 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2433.839689][T16624] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2433.850177][T16624] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:14 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3a0b000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2434.293349][T16657] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2434.310093][T16657] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2435.517680][T16671] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2435.547781][T16671] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2435.956688][T16689] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2435.966893][T16689] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:38:15 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0xe)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:15 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:15 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2437.127291][T16704] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2437.166339][T16704] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2437.563918][T16722] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2437.572628][T16722] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:17 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:17 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:17 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2438.407491][T16729] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2438.448665][T16729] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2438.872317][T16758] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2438.880571][T16758] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:18 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2544.281436][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 2544.288202][    C1] rcu: 	1-...!: (10491 ticks this GP) idle=e12/1/0x4000000000000000 softirq=188615/188617 fqs=1 
[ 2544.300102][    C1] 	(t=10501 jiffies g=349669 q=15)
[ 2544.305227][    C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g349669 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 2544.316526][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 2544.326499][    C1] rcu: RCU grace-period kthread stack dump:
[ 2544.332398][    C1] task:rcu_preempt     state:R  running task     stack:28816 pid:   14 ppid:     2 flags:0x00004000
[ 2544.343191][    C1] Call Trace:
[ 2544.346482][    C1]  __schedule+0x916/0x23e0
[ 2544.350929][    C1]  ? io_schedule_timeout+0x140/0x140
[ 2544.356237][    C1]  ? debug_object_destroy+0x210/0x210
[ 2544.361638][    C1]  schedule+0xcf/0x270
[ 2544.365723][    C1]  schedule_timeout+0x14a/0x250
[ 2544.370613][    C1]  ? usleep_range+0x170/0x170
[ 2544.375319][    C1]  ? lockdep_hardirqs_on+0x79/0x100
[ 2544.380551][    C1]  ? destroy_timer_on_stack+0x20/0x20
[ 2544.386023][    C1]  ? prepare_to_swait_exclusive+0x2d0/0x2d0
[ 2544.392004][    C1]  rcu_gp_kthread+0xd07/0x2300
[ 2544.396837][    C1]  ? lock_downgrade+0x5f0/0x6e0
[ 2544.401803][    C1]  ? print_cpu_stall_info+0x6b0/0x6b0
[ 2544.407203][    C1]  ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 2544.413041][    C1]  ? lockdep_hardirqs_on+0x79/0x100
[ 2544.418364][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2544.424658][    C1]  ? __kthread_parkme+0x13f/0x1e0
[ 2544.429854][    C1]  ? print_cpu_stall_info+0x6b0/0x6b0
[ 2544.435260][    C1]  kthread+0x3b1/0x4a0
[ 2544.439358][    C1]  ? __kthread_bind_mask+0xc0/0xc0
[ 2544.444508][    C1]  ret_from_fork+0x1f/0x30
[ 2544.448989][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 2544.455375][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 2544.462377][    C0] NMI backtrace for cpu 0
[ 2544.462389][    C0] CPU: 0 PID: 16819 Comm: syz-executor.1 Not tainted 5.13.0-rc1-syzkaller #0
[ 2544.462401][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2544.462411][    C0] RIP: 0010:lock_is_held_type+0xfd/0x140
[ 2544.462423][    C0] Code: 00 00 b8 ff ff ff ff 65 0f c1 05 7e 0d ec 76 83 f8 01 75 29 9c 58 f6 c4 02 75 3d 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 <44> 89 e8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 45 31 ed eb b9 0f 0b 48
[ 2544.462440][    C0] RSP: 0018:ffffc90000007ce8 EFLAGS: 00000086
[ 2544.462455][    C0] RAX: 0000000000000046 RBX: 0000000000000004 RCX: 0000000000000001
[ 2544.462465][    C0] RDX: 0000000000000000 RSI: 0000000000010003 RDI: 0000000000000000
[ 2544.462475][    C0] RBP: ffffffff8bf791e0 R08: 0000000000000000 R09: ffffffff8dc95717
[ 2544.462485][    C0] R10: fffffbfff1b92ae2 R11: 0000000000000000 R12: ffff8880a4418000
[ 2544.462495][    C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8880a4418a70
[ 2544.462506][    C0] FS:  00007f16fa28f700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000
[ 2544.462516][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2544.462525][    C0] CR2: 0000001b2bc35000 CR3: 00000000a6ed7000 CR4: 00000000001526f0
[ 2544.462535][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2544.462545][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2544.462553][    C0] Call Trace:
[ 2544.462558][    C0]  <IRQ>
[ 2544.462564][    C0]  rcu_read_lock_sched_held+0x3a/0x70
[ 2544.462571][    C0]  lock_acquire+0x5e9/0x740
[ 2544.462577][    C0]  ? lock_release+0x720/0x720
[ 2544.462584][    C0]  ? __hrtimer_run_queues+0x51a/0xe40
[ 2544.462592][    C0]  ? lock_downgrade+0x6e0/0x6e0
[ 2544.462598][    C0]  _raw_spin_lock_irq+0x32/0x50
[ 2544.462604][    C0]  ? __hrtimer_run_queues+0x243/0xe40
[ 2544.462611][    C0]  __hrtimer_run_queues+0x243/0xe40
[ 2544.462618][    C0]  ? hrtimer_sleeper_start_expires+0x80/0x80
[ 2544.462626][    C0]  ? ktime_get_update_offsets_now+0x3eb/0x5c0
[ 2544.462634][    C0]  hrtimer_interrupt+0x330/0xa00
[ 2544.462642][    C0]  __sysvec_apic_timer_interrupt+0x146/0x540
[ 2544.462651][    C0]  sysvec_apic_timer_interrupt+0x8e/0xc0
[ 2544.462658][    C0]  </IRQ>
[ 2544.462665][    C0]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2544.462674][    C0] RIP: 0010:__pv_queued_spin_lock_slowpath+0x3c4/0xb40
[ 2544.462688][    C0] Code: 00 48 c1 e9 03 83 e3 07 41 be 01 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8d 2c 01 eb 0c f3 90 41 83 ec 01 0f 84 72 04 00 00 <41> 0f b6 45 00 38 d8 7f 08 84 c0 0f 85 91 05 00 00 0f b6 45 00 84
[ 2544.462706][    C0] RSP: 0018:ffffc90001f2edc8 EFLAGS: 00000216
[ 2544.462720][    C0] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 1ffff11005201208
[ 2544.462731][    C0] RDX: 0000000000000001 RSI: ffffffff817adf41 RDI: ffffffff8132b571
[ 2544.462742][    C0] RBP: ffff888029009040 R08: 0000000000000001 R09: 0000000000000001
[ 2544.462753][    C0] R10: ffffffff817adf09 R11: 0000000000000000 R12: 000000000000465f
[ 2544.462764][    C0] R13: ffffed1005201208 R14: 0000000000000001 R15: ffff8880b9c36000
[ 2544.462773][    C0]  ? trace_hardirqs_on+0x19/0x1c0
[ 2544.462781][    C0]  ? trace_hardirqs_on+0x51/0x1c0
[ 2544.462789][    C0]  ? kvm_wait+0x51/0x100
[ 2544.462796][    C0]  ? __pv_queued_spin_lock_slowpath+0x8b8/0xb40
[ 2544.462805][    C0]  ? pv_hash+0x100/0x100
[ 2544.462811][    C0]  ? lock_release+0x720/0x720
[ 2544.462819][    C0]  do_raw_spin_lock+0x200/0x2b0
[ 2544.462826][    C0]  ? rwlock_bug.part.0+0x90/0x90
[ 2544.462834][    C0]  ? ext4_mb_load_buddy_gfp+0xb4e/0x1550
[ 2544.462842][    C0]  ext4_lock_group+0x1e5/0x240
[ 2544.462849][    C0]  ext4_free_blocks+0x167b/0x1e50
[ 2544.462857][    C0]  ? ext4_mb_new_blocks+0x5220/0x5220
[ 2544.462866][    C0]  ? __sanitizer_cov_trace_cmp1+0x22/0x80
[ 2544.462874][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2544.462883][    C0]  ? ext4_ext_try_to_merge_right+0x33e/0x3d0
[ 2544.462891][    C0]  ext4_ext_try_to_merge+0x57e/0x710
[ 2544.462899][    C0]  ? __ext4_check_dir_entry+0x714/0x8b0
[ 2544.462907][    C0]  ext4_ext_map_blocks+0x365f/0x5fb0
[ 2544.462921][    C0]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2544.462930][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2544.462938][    C0]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2544.462947][    C0]  ? ext4_ext_release+0x10/0x10
[ 2544.462954][    C0]  ? lock_release+0x720/0x720
[ 2544.462962][    C0]  ? down_write+0xe0/0x150
[ 2544.462969][    C0]  ? down_write_killable+0x170/0x170
[ 2544.462977][    C0]  ? ext4_map_blocks+0x597/0x17d0
[ 2544.462985][    C0]  ? ext4_map_blocks+0x5a5/0x17d0
[ 2544.462992][    C0]  ext4_map_blocks+0x653/0x17d0
[ 2544.463000][    C0]  ? ext4_issue_zeroout+0x1f0/0x1f0
[ 2544.463008][    C0]  ? ext4_convert_unwritten_extents+0x1d5/0x5b0
[ 2544.463017][    C0]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2544.463026][    C0]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2544.463035][    C0]  ? ext4_journal_check_start+0x1b3/0x2a0
[ 2544.463044][    C0]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2544.463052][    C0]  ? __ext4_journal_start_sb+0x1f1/0x4a0
[ 2544.463061][    C0]  ext4_convert_unwritten_extents+0x20e/0x5b0
[ 2544.463070][    C0]  ? ext4_fallocate+0x3fe0/0x3fe0
[ 2544.463078][    C0]  ? iomap_dio_bio_actor+0x1090/0x1090
[ 2544.463086][    C0]  ? generic_update_time+0x21d/0x350
[ 2544.463094][    C0]  ext4_dio_write_end_io+0x126/0x170
[ 2544.463101][    C0]  ? ext4_handle_inode_extension+0x870/0x870
[ 2544.463110][    C0]  iomap_dio_complete+0x191/0x780
[ 2544.463116][    C0]  iomap_dio_rw+0x62/0x90
[ 2544.463123][    C0]  ext4_file_write_iter+0xe18/0x14e0
[ 2544.463130][    C0]  ? ext4_buffered_write_iter+0x4d0/0x4d0
[ 2544.463138][    C0]  ? lock_chain_count+0x20/0x20
[ 2544.463145][    C0]  ? direct_splice_actor+0x110/0x180
[ 2544.463151][    C0]  ? splice_direct_to_actor+0x34b/0x8c0
[ 2544.463155][    C0]  ? do_splice_direct+0x1b3/0x280
[ 2544.463159][    C0]  ? do_sendfile+0x9f0/0x1110
[ 2544.463163][    C0]  ? __x64_sys_sendfile64+0x1cc/0x210
[ 2544.463167][    C0]  do_iter_readv_writev+0x46f/0x740
[ 2544.463171][    C0]  ? new_sync_write+0x650/0x650
[ 2544.463175][    C0]  ? apparmor_file_permission+0x26e/0x4e0
[ 2544.463179][    C0]  do_iter_write+0x188/0x670
[ 2544.463183][    C0]  ? iter_file_splice_write+0x531/0xc70
[ 2544.463187][    C0]  vfs_iter_write+0x70/0xa0
[ 2544.463190][    C0]  iter_file_splice_write+0x723/0xc70
[ 2544.463195][    C0]  ? generic_file_splice_read+0x485/0x6c0
[ 2544.463199][    C0]  ? generic_splice_sendpage+0x140/0x140
[ 2544.463203][    C0]  ? do_splice_direct+0x280/0x280
[ 2544.463207][    C0]  ? generic_splice_sendpage+0x140/0x140
[ 2544.463211][    C0]  direct_splice_actor+0x110/0x180
[ 2544.463215][    C0]  splice_direct_to_actor+0x34b/0x8c0
[ 2544.463220][    C0]  ? generic_file_splice_read+0x6c0/0x6c0
[ 2544.463224][    C0]  ? do_splice_to+0x250/0x250
[ 2544.463227][    C0]  ? security_file_permission+0x248/0x560
[ 2544.463232][    C0]  ? rw_verify_area+0x118/0x350
[ 2544.463235][    C0]  do_splice_direct+0x1b3/0x280
[ 2544.463239][    C0]  ? splice_direct_to_actor+0x8c0/0x8c0
[ 2544.463243][    C0]  ? do_sendfile+0xdb4/0x1110
[ 2544.463247][    C0]  ? do_sendfile+0xdc5/0x1110
[ 2544.463250][    C0]  do_sendfile+0x9f0/0x1110
[ 2544.463254][    C0]  ? do_pwritev+0x270/0x270
[ 2544.463258][    C0]  ? __context_tracking_exit+0xb8/0xe0
[ 2544.463262][    C0]  ? lock_downgrade+0x6e0/0x6e0
[ 2544.463265][    C0]  ? lock_downgrade+0x6e0/0x6e0
[ 2544.463269][    C0]  __x64_sys_sendfile64+0x1cc/0x210
[ 2544.463273][    C0]  ? __ia32_sys_sendfile+0x220/0x220
[ 2544.463278][    C0]  ? syscall_enter_from_user_mode+0x27/0x70
[ 2544.463282][    C0]  do_syscall_64+0x3a/0xb0
[ 2544.463286][    C0]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2544.463290][    C0] RIP: 0033:0x4665f9
[ 2544.463296][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2544.463306][    C0] RSP: 002b:00007f16fa28f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2544.463315][    C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 2544.463320][    C0] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2544.463326][    C0] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000
[ 2544.463332][    C0] R10: 0000000401ffc000 R11: 0000000000000246 R12: 000000000056bf60
[ 2544.463337][    C0] R13: 0000000000a9fb1f R14: 00007f16fa28f300 R15: 0000000000022000
[ 2544.463372][    C1] NMI backtrace for cpu 1
[ 2545.266424][    C1] CPU: 1 PID: 16821 Comm: syz-executor.2 Not tainted 5.13.0-rc1-syzkaller #0
[ 2545.275217][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2545.285287][    C1] Call Trace:
[ 2545.288597][    C1]  <IRQ>
[ 2545.291455][    C1]  dump_stack+0x141/0x1d7
[ 2545.295808][    C1]  nmi_cpu_backtrace.cold+0x44/0xd7
[ 2545.301029][    C1]  ? lapic_can_unplug_cpu+0x80/0x80
[ 2545.306250][    C1]  nmi_trigger_cpumask_backtrace+0x1b3/0x230
[ 2545.312333][    C1]  rcu_dump_cpu_stacks+0x25e/0x3f0
[ 2545.317470][    C1]  rcu_sched_clock_irq.cold+0x3f1/0x74b
[ 2545.323062][    C1]  ? find_held_lock+0x2d/0x110
[ 2545.327852][    C1]  ? rcutree_dead_cpu+0x50/0x50
[ 2545.332734][    C1]  ? tick_sched_timer+0x2b/0x2d0
[ 2545.337758][    C1]  update_process_times+0x16d/0x200
[ 2545.342993][    C1]  tick_sched_handle+0x9b/0x180
[ 2545.347858][    C1]  tick_sched_timer+0x1b0/0x2d0
[ 2545.352729][    C1]  ? get_cpu_iowait_time_us+0x3f0/0x3f0
[ 2545.358284][    C1]  __hrtimer_run_queues+0x1c0/0xe40
[ 2545.363510][    C1]  ? hrtimer_sleeper_start_expires+0x80/0x80
[ 2545.369507][    C1]  ? ktime_get_update_offsets_now+0x3eb/0x5c0
[ 2545.375607][    C1]  hrtimer_interrupt+0x330/0xa00
[ 2545.380591][    C1]  __sysvec_apic_timer_interrupt+0x146/0x540
[ 2545.386681][    C1]  sysvec_apic_timer_interrupt+0x40/0xc0
[ 2545.392342][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2545.398359][    C1] RIP: 0010:mac80211_hwsim_tx_frame_no_nl.isra.0+0x77b/0x1330
[ 2545.405899][    C1] Code: 00 00 00 c6 84 24 98 00 00 00 00 74 bb e8 fd bf 4c fc 48 8d bb a4 3c 00 00 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 0f b6 04 28 <38> d0 7f 08 84 c0 0f 85 36 09 00 00 44 0f b6 bb a4 3c 00 00 31 ff
[ 2545.425628][    C1] RSP: 0018:ffffc90000dc0ba0 EFLAGS: 00000202
[ 2545.431717][    C1] RAX: 0000000000000000 RBX: ffff88808f6831e0 RCX: 0000000000000100
[ 2545.439722][    C1] RDX: 0000000000000004 RSI: ffffffff85281243 RDI: ffff88808f686e84
[ 2545.447702][    C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000
[ 2545.455729][    C1] R10: ffffffff85281279 R11: 0000000000000000 R12: ffff8880ac964500
[ 2545.463711][    C1] R13: ffff888073b93410 R14: ffff888073b931e0 R15: 0000000000000000
[ 2545.471702][    C1]  ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x799/0x1330
[ 2545.478581][    C1]  ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x763/0x1330
[ 2545.485487][    C1]  ? lockdep_hardirqs_on+0x79/0x100
[ 2545.490717][    C1]  ? mac80211_hwsim_add_chanctx+0x220/0x220
[ 2545.496651][    C1]  ? ktime_get_with_offset+0x1ef/0x500
[ 2545.502138][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2545.508410][    C1]  ? mac80211_hwsim_monitor_rx+0x1c2/0x840
[ 2545.514344][    C1]  mac80211_hwsim_tx_frame+0x14f/0x1e0
[ 2545.519830][    C1]  mac80211_hwsim_beacon_tx+0x4ba/0x910
[ 2545.525404][    C1]  __iterate_interfaces+0x1e5/0x520
[ 2545.530731][    C1]  ? mac80211_hwsim_tx_frame+0x1e0/0x1e0
[ 2545.536413][    C1]  ? mac80211_hwsim_tx_frame+0x1e0/0x1e0
[ 2545.542066][    C1]  ? mac80211_hwsim_addr_match+0x180/0x180
[ 2545.547962][    C1]  ieee80211_iterate_active_interfaces_atomic+0x8d/0x170
[ 2545.555016][    C1]  mac80211_hwsim_beacon+0xd5/0x1a0
[ 2545.560240][    C1]  __hrtimer_run_queues+0x609/0xe40
[ 2545.565476][    C1]  ? hrtimer_sleeper_start_expires+0x80/0x80
[ 2545.571493][    C1]  ? ktime_get_update_offsets_now+0x3eb/0x5c0
[ 2545.577605][    C1]  hrtimer_run_softirq+0x17b/0x360
[ 2545.582748][    C1]  __do_softirq+0x29b/0x9f6
[ 2545.587298][    C1]  __irq_exit_rcu+0x136/0x200
[ 2545.592022][    C1]  irq_exit_rcu+0x5/0x20
[ 2545.596283][    C1]  sysvec_apic_timer_interrupt+0x93/0xc0
[ 2545.601942][    C1]  </IRQ>
[ 2545.604898][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2545.610985][    C1] RIP: 0010:ext4_mb_use_best_found+0x1f7/0x8d0
[ 2545.617176][    C1] Code: 8d 74 24 30 41 8b 54 24 20 48 b8 00 00 00 00 00 fc ff df 4c 89 f1 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e c3 05 00 00 <41> 89 54 24 30 48 89 df 4c 89 f6 e8 39 f0 ff ff 49 8d 7c 24 40 48
[ 2545.636801][    C1] RSP: 0018:ffffc90001f5e600 EFLAGS: 00000246
[ 2545.642894][    C1] RAX: 0000000000000000 RBX: ffffc90001f5e880 RCX: 1ffff1100e92e772
[ 2545.650889][    C1] RDX: 0000000000000000 RSI: ffffffff8210ce20 RDI: ffff888074973b80
[ 2545.658874][    C1] RBP: ffffc90001f5e638 R08: 0000000000000001 R09: 0000000000000001
[ 2545.666856][    C1] R10: ffffffff8210ce11 R11: 0000000000000002 R12: ffff888074973b60
[ 2545.674834][    C1] R13: ffff888074973bc6 R14: ffff888074973b90 R15: ffff888074973b9c
[ 2545.682826][    C1]  ? ext4_mb_use_best_found+0xd1/0x8d0
[ 2545.688310][    C1]  ? ext4_mb_use_best_found+0xe0/0x8d0
[ 2545.693803][    C1]  ext4_mb_complex_scan_group+0x6dd/0x9e0
[ 2545.699560][    C1]  ? ext4_mb_check_limits+0x490/0x490
[ 2545.704967][    C1]  ? ext4_get_group_info+0x211/0x3d0
[ 2545.710274][    C1]  ? __sanitizer_cov_trace_cmp4+0x1c/0x70
[ 2545.716026][    C1]  ? ext4_mb_good_group+0x3d2/0x510
[ 2545.721242][    C1]  ? ext4_mb_regular_allocator+0xd4d/0x37c0
[ 2545.727165][    C1]  ext4_mb_regular_allocator+0xdb0/0x37c0
[ 2545.732924][    C1]  ? ___slab_alloc+0x147/0x7a0
[ 2545.737892][    C1]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2545.744171][    C1]  ? mark_held_locks+0x9f/0xe0
[ 2545.748980][    C1]  ? ext4_mb_prefetch_fini+0x970/0x970
[ 2545.754486][    C1]  ? rcu_read_lock_sched_held+0x3a/0x70
[ 2545.760071][    C1]  ? kmem_cache_alloc+0x365/0x3a0
[ 2545.765140][    C1]  ext4_mb_new_blocks+0x2480/0x5220
[ 2545.770392][    C1]  ? find_held_lock+0x2d/0x110
[ 2545.775228][    C1]  ? ext4_discard_preallocations+0xea0/0xea0
[ 2545.781268][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2545.787553][    C1]  ? mark_buffer_dirty+0x145/0x5d0
[ 2545.792770][    C1]  ? __ext4_handle_dirty_metadata+0x1f3/0x730
[ 2545.798880][    C1]  ext4_new_meta_blocks+0x2fe/0x360
[ 2545.804118][    C1]  ? ext4_should_retry_alloc+0x230/0x230
[ 2545.809789][    C1]  ? ext4_reserve_inode_write+0x114/0x230
[ 2545.815546][    C1]  ? __sanitizer_cov_trace_const_cmp2+0x22/0x80
[ 2545.821855][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2545.828142][    C1]  ext4_ext_insert_extent+0x102b/0x4170
[ 2545.833754][    C1]  ? do_raw_write_lock+0x11a/0x280
[ 2545.838905][    C1]  ? do_raw_read_unlock+0x70/0x70
[ 2545.843957][    C1]  ? get_implied_cluster_alloc.isra.0+0x930/0x930
[ 2545.850405][    C1]  ? __ext4_ext_dirty+0x106/0x180
[ 2545.855463][    C1]  ext4_split_extent_at+0x42b/0xe40
[ 2545.860698][    C1]  ? ext4_ext_insert_extent+0x4170/0x4170
[ 2545.866463][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2545.872731][    C1]  ? ext4_cache_extents+0x148/0x2d0
[ 2545.877965][    C1]  ext4_split_extent+0x21f/0x530
[ 2545.882941][    C1]  ext4_ext_map_blocks+0x2ff1/0x5fb0
[ 2545.888275][    C1]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2545.894300][    C1]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2545.900321][    C1]  ? ext4_ext_release+0x10/0x10
[ 2545.905210][    C1]  ? lock_release+0x720/0x720
[ 2545.909938][    C1]  ? down_write+0xe0/0x150
[ 2545.914388][    C1]  ? down_write_killable+0x170/0x170
[ 2545.919710][    C1]  ext4_map_blocks+0x653/0x17d0
[ 2545.924602][    C1]  ? ext4_issue_zeroout+0x1f0/0x1f0
[ 2545.929826][    C1]  ? ext4_iomap_begin+0x541/0x7a0
[ 2545.934878][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2545.941141][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2545.947514][    C1]  ? ext4_journal_check_start+0x1b3/0x2a0
[ 2545.953265][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2545.959533][    C1]  ? __ext4_journal_start_sb+0x1f1/0x4a0
[ 2545.965197][    C1]  ext4_iomap_begin+0x463/0x7a0
[ 2545.970091][    C1]  ? ext4_iomap_begin_report+0x600/0x600
[ 2545.975760][    C1]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2545.981945][    C1]  ? __iomap_dio_rw+0x719/0x1330
[ 2545.987010][    C1]  ? iomap_apply+0x5d6/0xb50
[ 2545.991641][    C1]  ? __iomap_dio_rw+0x719/0x1330
[ 2545.996595][    C1]  iomap_apply+0x177/0xb50
[ 2546.001030][    C1]  ? iomap_dio_rw+0x90/0x90
[ 2546.005557][    C1]  ? trace_event_raw_event_iomap_apply+0x430/0x430
[ 2546.012184][    C1]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2546.018378][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[ 2546.024648][    C1]  ? filemap_check_errors+0xa5/0x150
[ 2546.030074][    C1]  __iomap_dio_rw+0x719/0x1330
[ 2546.034859][    C1]  ? iomap_dio_rw+0x90/0x90
[ 2546.039428][    C1]  ? iomap_dio_bio_actor+0x1090/0x1090
[ 2546.044927][    C1]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2546.051124][    C1]  ? ext4_file_write_iter+0x107d/0x14e0
[ 2546.056729][    C1]  iomap_dio_rw+0x30/0x90
[ 2546.061084][    C1]  ext4_file_write_iter+0xe18/0x14e0
[ 2546.066410][    C1]  ? ext4_buffered_write_iter+0x4d0/0x4d0
[ 2546.072158][    C1]  ? do_iter_readv_writev+0x436/0x740
[ 2546.077564][    C1]  do_iter_readv_writev+0x46f/0x740
[ 2546.082805][    C1]  ? new_sync_write+0x650/0x650
[ 2546.087677][    C1]  ? apparmor_file_permission+0x26e/0x4e0
[ 2546.093442][    C1]  do_iter_write+0x188/0x670
[ 2546.098075][    C1]  ? iter_file_splice_write+0x44a/0xc70
[ 2546.103648][    C1]  vfs_iter_write+0x70/0xa0
[ 2546.108172][    C1]  iter_file_splice_write+0x723/0xc70
[ 2546.113576][    C1]  ? generic_file_splice_read+0x485/0x6c0
[ 2546.119316][    C1]  ? generic_splice_sendpage+0x140/0x140
[ 2546.125407][    C1]  ? do_splice_direct+0x280/0x280
[ 2546.130462][    C1]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2546.136645][    C1]  ? generic_splice_sendpage+0x140/0x140
[ 2546.142299][    C1]  direct_splice_actor+0x110/0x180
[ 2546.147432][    C1]  splice_direct_to_actor+0x34b/0x8c0
[ 2546.152829][    C1]  ? generic_file_splice_read+0x6c0/0x6c0
[ 2546.158603][    C1]  ? do_splice_to+0x250/0x250
[ 2546.163309][    C1]  ? do_splice_direct+0x193/0x280
[ 2546.168370][    C1]  ? do_splice_direct+0x19d/0x280
[ 2546.173420][    C1]  do_splice_direct+0x1b3/0x280
[ 2546.178290][    C1]  ? splice_direct_to_actor+0x8c0/0x8c0
[ 2546.183873][    C1]  do_sendfile+0x9f0/0x1110
[ 2546.188409][    C1]  ? do_pwritev+0x270/0x270
[ 2546.192933][    C1]  ? irqentry_enter+0x2b/0x50
[ 2546.197635][    C1]  ? asm_sysvec_apic_timer_interrupt+0x12/0x20
[ 2546.203810][    C1]  ? lockdep_hardirqs_on+0x79/0x100
[ 2546.209037][    C1]  __x64_sys_sendfile64+0x1cc/0x210
[ 2546.214275][    C1]  ? __ia32_sys_sendfile+0x220/0x220
[ 2546.219586][    C1]  ? syscall_enter_from_user_mode+0x31/0x70
[ 2546.225508][    C1]  do_syscall_64+0x3a/0xb0
[ 2546.229946][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2546.235858][    C1] RIP: 0033:0x4665f9
[ 2546.239764][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2546.259915][    C1] RSP: 002b:00007fe0b5327188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2546.268615][    C1] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9
[ 2546.276603][    C1] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 2546.284585][    C1] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000
[ 2546.292571][    C1] R10: 0000000401ffc000 R11: 0000000000000246 R12: 000000000056bf60
[ 2546.300557][    C1] R13: 0000000000a9fb1f R14: 00007fe0b5327300 R15: 0000000000022000