'./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:32 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:32 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:32 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052e82c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2212.547031][T12266] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2212.557733][T12266] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:32 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2212.648575][T12270] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2212.661081][T12270] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:33 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:34 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2215.253652][T12266] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2215.265594][T12266] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2215.286200][T12283] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:34:35 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37350c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:35 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2215.535949][T12283] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2216.777683][T12314] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2216.788508][T12314] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2216.808530][T12316] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2216.817915][T12316] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:36 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:36 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:36 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:36 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00052f82c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:36 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2217.428386][T12338] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
02:34:37 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2217.482037][T12338] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2217.511929][T12344] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2217.521294][T12344] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:37 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:37 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:38 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:38 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa608}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2218.948378][T12338] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2218.965891][T12338] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:38 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e370418188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2219.068017][T12357] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2219.500512][T12357] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2220.034412][T12384] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2220.043428][T12384] netlink: 206776 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:39 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053082c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:39 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:39 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:39 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:40 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x36000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:40 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:40 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8a0a0000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:40 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:41 executing program 1:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2221.472030][T12412] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2221.481262][T12412] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2221.641953][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.648536][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
02:34:41 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e370435188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2222.813635][T12441] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2222.843738][T12441] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2222.860994][T12445] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2222.870915][T12445] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2223.290498][T12441] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2223.298961][T12441] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:43 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053182c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:43 executing program 1:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:43 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x600300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:43 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:43 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c0c8000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2223.601536][T12472] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2223.622684][T12472] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
02:34:43 executing program 1:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2223.713338][T12472] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:43 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2223.923420][T12477] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:34:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(0x0, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2223.980578][T12477] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:44 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:44 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(0x0, 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:44 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2225.849711][T12472] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2225.863689][T12472] netlink: 'syz-executor.0': attribute type 12 has an invalid length.
[ 2225.872878][T12472] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2225.884614][T12502] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2225.894275][T12502] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:46 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053282c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(0x0, 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:46 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c358000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2226.593488][T12533] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2226.602463][T12533] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(0x0, 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, 0x0, 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:47 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2227.566035][   T37] audit: type=1804 audit(1620786887.394:24): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/2152/file0/bus" dev="sda1" ino=13938 res=1 errno=0
02:34:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:47 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2228.097002][   T37] audit: type=1804 audit(1620786887.924:25): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/2153/file0/bus" dev="sda1" ino=13938 res=1 errno=0
[ 2228.928817][T12526] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2228.947192][T12526] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2229.287567][T12531] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2229.303659][T12531] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2229.657751][T12557] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2229.702292][T12557] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:49 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:49 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:49 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053382c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:49 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:49 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188002f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:49 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2230.130646][   T37] audit: type=1804 audit(1620786889.954:26): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/newroot/2154/file0/bus" dev="sda1" ino=13938 res=1 errno=0
02:34:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2230.397772][T12600] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2230.486415][T12600] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:50 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:50 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:51 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2232.413108][T12611] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2232.421322][T12611] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2232.788914][T12612] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2232.813840][T12612] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:53 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053482c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(0x0, 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:53 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188004f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2233.360887][T12682] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2233.397642][T12682] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(0x0, 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:53 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(0x0, 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2235.414798][   T37] audit: type=1800 audit(1620786895.244:27): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=13931 res=0 errno=0
[ 2236.163212][T12681] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2236.181192][T12681] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:34:56 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137353e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:56 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x7000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:34:56 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:34:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:56 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188008f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2236.840434][T12747] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2236.871134][T12747] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:34:57 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2237.550481][   T37] audit: type=1800 audit(1620786897.374:28): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=13931 res=0 errno=0
02:34:57 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:57 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:34:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2240.007174][T12749] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2240.021182][T12749] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:00 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37100c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:00 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:00 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:00 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:00 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2240.366125][T12787] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2240.396958][T12787] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:01 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c18800ef01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:01 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:01 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2241.230322][T12820] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2241.250757][T12820] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2241.831721][T12846] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2241.840410][T12846] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2243.151873][T12820] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2243.160091][T12820] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:03 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37350c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:03 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:03 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:03 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188060f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2243.454513][T12880] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2243.466686][T12880] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2243.497403][T12879] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2243.551701][T12879] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2245.296027][T12880] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2245.311177][T12880] netlink: 209796 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2245.325426][T12907] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
02:35:05 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040b188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:05 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:05 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:05 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, 0x0, 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:05 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2245.337772][T12907] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2246.565448][T12937] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2246.577425][T12937] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2246.595657][T12943] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:35:06 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f03500d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:06 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:06 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:06 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2246.618436][T12943] netlink: 210104 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:06 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e370435188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2247.046559][T12963] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2247.068257][T12963] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:08 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2249.364870][T12966] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2249.376664][T12966] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:09 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01702d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2249.443401][T12996] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2249.789231][T12996] netlink: 199352 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2249.814961][T13016] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2249.834760][T13016] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:09 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c0e8000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:09 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2251.568986][T13036] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2251.581831][T13047] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2251.638417][T13053] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2251.681857][T13053] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:11 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01704d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:11 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:11 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa6080000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:11 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:11 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c358000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2252.306918][T13080] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2252.392496][T13080] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:13 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:13 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2254.127788][T13084] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2254.142889][T13084] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:14 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188002f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:14 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01708d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:14 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2254.743610][T13145] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2254.753142][T13145] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2257.201544][T13143] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2257.211296][T13143] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:17 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2257.945056][T13145] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2257.971526][T13145] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:18 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f0170ed1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188004f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:18 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:18 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2258.543779][T13221] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2258.555454][T13221] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, 0x0, 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:19 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:19 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, 0x0, 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:20 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:20 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8a0a000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2261.487361][T13225] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2261.497230][T13225] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2261.835370][T13230] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2261.857867][T13230] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2262.195565][T13251] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
02:35:22 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01760d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:22 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, 0x0, 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2262.239040][T13251] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2263.445840][T13292] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2263.455060][T13292] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:23 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:23 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:23 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188007f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:23 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:24 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:24 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2264.956449][T13303] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2265.054233][T13303] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2265.650602][T13325] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2265.661595][T13325] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:25 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xf}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:25 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:25 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:25 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2266.575500][T13339] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2266.608986][T13339] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:26 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188008f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:26 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:26 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xec0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2267.261324][T13405] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2267.388143][T13405] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:27 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:27 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:28 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2269.861819][T13423] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2269.935996][T13423] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:30 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c18800ef01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:30 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffffffffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:30 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:30 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:30 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x34000}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2270.579228][T13463] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2270.637601][T13463] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:31 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:31 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:31 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:32 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2274.014640][T13496] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2274.047784][T13496] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:34 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188023f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:34 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x20034020}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2274.627656][T13526] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2274.648552][T13526] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:35 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x7ffff000}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2277.919826][T13522] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2277.931624][T13522] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2278.261535][T13527] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2278.269756][T13527] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2278.607064][T13560] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2278.651980][T13560] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:38 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188060f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:38 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:38 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:38 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2279.167198][T13605] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2279.183749][T13605] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:35:39 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:39 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:40 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2282.987876][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2282.994301][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2285.380428][T13617] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2285.419979][T13617] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2286.191074][T13609] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2286.211430][T13609] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:46 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f03500d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:46 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2287.060821][T13611] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2287.078730][T13611] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2291.176544][T13674] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2291.189253][T13674] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:51 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x3}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:51 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:51 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x700000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2292.524267][T13676] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2292.542973][T13676] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2292.888380][T13704] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2292.900282][T13704] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:35:52 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01702d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:52 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:52 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:52 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2293.603277][T13710] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2293.616256][T13710] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2294.006336][T13711] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2294.032638][T13711] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2294.382251][T13754] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2294.390481][T13754] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x7}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:54 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:54 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x0)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r0, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2295.649153][T13800] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2295.662753][T13800] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:35:55 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01704d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r0, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:55 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r0, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2296.954884][T13798] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2296.972866][T13798] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2297.547468][T13801] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2297.571798][T13801] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2297.931485][T13816] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2297.940266][T13816] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2298.357262][T13836] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2298.366072][T13836] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:35:58 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:58 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:58 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:35:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2299.330786][T13897] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2299.340065][T13897] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:35:59 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01707d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:59 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:35:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:35:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2300.690565][T13901] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2300.701243][T13901] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2301.100614][T13930] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2301.116643][T13930] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2301.475450][T13938] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2301.490933][T13938] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2301.863669][T13943] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2301.873464][T13943] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:01 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x35}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:01 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:01 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:02 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2303.087109][T13993] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2303.103192][T13993] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:03 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01708d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:03 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x600}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2304.422529][T14005] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2304.652217][T14005] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2305.541101][T14028] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2305.550703][T14028] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:05 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:05 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2306.227988][T14040] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2306.261171][T14040] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2306.710439][T14074] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2306.727710][T14074] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:06 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f0170ed1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:06 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa608000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:06 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffff1f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:06 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2308.375029][T14087] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
02:36:08 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2308.488725][T14087] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2309.099251][T14107] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2309.116105][T14107] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:09 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xa8a}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2309.720790][T14154] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2309.735232][T14154] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:09 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01723d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:09 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffc90000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:11 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:11 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2312.001325][T14176] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2312.024801][T14176] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2312.509622][T14155] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2312.554001][T14155] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:12 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:12 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:12 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffffffffff000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:12 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01760d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2313.210195][T14233] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2313.311690][T14233] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:13 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:13 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2315.726778][T14244] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2315.744121][T14244] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2316.138449][T14254] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2316.166287][T14254] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2316.504855][T14246] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2316.531142][T14246] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:16 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:16 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:16 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xf}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2316.863812][T14277] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
02:36:17 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2317.146015][T14277] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2318.218877][T14325] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2318.228717][T14325] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:18 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:18 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0xec0}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2319.501502][T14335] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2319.509729][T14335] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2319.921191][T14358] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2319.929808][T14358] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:19 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:19 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:19 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:19 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:19 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x34000}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:20 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2321.340653][T14365] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2321.690106][T14365] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2322.170727][T14397] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2322.179239][T14397] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:22 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:22 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:22 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:22 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x20034020}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:23 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:23 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:23 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:23 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x7ffff000}], 0x1}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2323.535505][T14439] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2323.561180][T14439] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:23 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2324.927430][T14441] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2324.943359][T14441] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2325.297795][T14470] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2325.321620][T14470] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:25 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x7}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:25 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:25 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xa65}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:25 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x2}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2326.576646][T14476] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2326.641719][T14476] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2327.051642][T14506] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2327.059876][T14506] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:26 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:26 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:26 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:27 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2328.396555][T14511] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2328.414089][T14511] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2328.812989][T14513] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2328.842315][T14513] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2329.233821][T14520] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2329.250425][T14520] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2329.634985][T14545] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2329.643513][T14545] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:29 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:29 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:29 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:29 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:29 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x3}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:29 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2330.510852][T14611] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2330.520242][T14611] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
02:36:30 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8a0a}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:30 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:30 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:30 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:31 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2331.915659][T14614] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2331.931876][T14614] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2332.335831][T14643] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2332.353287][T14643] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2332.746046][T14639] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2332.761943][T14639] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2333.153541][T14623] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2333.170292][T14623] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2333.554440][T14645] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2333.563246][T14645] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:33 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:33 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:33 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x8}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:33 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2334.834545][T14720] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2334.854207][T14720] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:34 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:34 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x650a}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:35 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:35 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2337.005662][T14716] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2337.021587][T14716] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2337.369445][T14752] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2337.381573][T14752] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2337.741180][T14739] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[ 2337.780328][T14739] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2338.154992][T14740] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2338.163560][T14740] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:38 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:38 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:38 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x36000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:38 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x35}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2338.719441][T14818] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2338.730247][T14818] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:38 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:40 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:40 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:41 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:41 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2344.427221][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.433741][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2345.663759][T14825] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2345.681495][T14825] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:46 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:46 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x500}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2346.818179][T14883] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2346.903118][T14883] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:46 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x600300}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:46 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x36000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:47 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffff1f}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:47 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:47 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:48 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:48 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2349.425828][T14896] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2349.440949][T14896] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2349.798105][T14919] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2349.841162][T14919] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2350.236239][T14918] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2350.247143][T14918] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:50 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x700}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:50 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:50 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0xffffc90000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2351.427494][T14960] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2351.436058][T14960] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:51 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:51 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x600300}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:51 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:51 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:51 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:51 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:52 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:52 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2352.984001][T14964] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2353.218814][T14964] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2353.869296][T14990] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2353.887171][T14990] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:53 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8a6}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:53 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x7}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:53 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2354.530378][T14991] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2354.549020][T14991] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2354.906208][T15033] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2354.925530][T15033] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:54 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:54 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:54 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:54 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:36:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

[ 2356.616260][T15056] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2356.678390][T15056] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:56 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:56 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

[ 2357.107056][T15066] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2357.131102][T15066] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2358.165815][T15082] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2358.190171][T15082] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2358.638384][T15111] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2358.646825][T15111] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:36:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:36:58 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:58 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:58 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:36:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:58 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:59 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2359.903423][T15150] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2359.917798][T15150] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:36:59 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:36:59 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x23}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:36:59 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:00 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2361.190979][T15151] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2361.201653][T15151] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2361.611144][T15183] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2361.625067][T15183] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:01 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:01 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:01 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:01 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:01 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:02 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2363.281797][T15192] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2363.290016][T15192] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2363.773025][T15225] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2363.781236][T15225] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:03 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:03 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:03 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:03 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:03 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2365.065226][T15269] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2365.082886][T15269] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:05 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:05 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:05 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:05 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x700}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:05 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:06 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2367.408553][T15292] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2367.425565][T15292] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2367.957125][T15293] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2367.966870][T15293] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:07 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:07 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:07 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:07 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x650a0000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:07 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xb3a}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:08 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2369.750285][T15313] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2369.775299][T15313] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2370.314474][T15345] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2370.324118][T15345] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:10 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:10 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:10 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:10 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2372.104616][T15354] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2372.130959][T15354] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2372.688646][T15390] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2372.698250][T15390] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:12 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:12 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:12 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:13 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2374.120747][T15403] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2374.218333][T15403] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2375.054399][T15433] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2375.063430][T15433] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:14 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:14 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:15 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3a0b}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:16 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:16 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xa608}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:16 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:16 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2376.560901][T15476] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2376.589178][T15476] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:17 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:17 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2377.948477][T15481] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2377.965241][T15481] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2378.348667][T15504] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2378.361495][T15504] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:18 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:18 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2379.578389][T15518] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2379.684910][T15518] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2380.093776][T15551] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2380.103564][T15551] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:20 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:20 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:20 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:20 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:20 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2381.275724][T15573] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2381.318664][T15573] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2381.722638][T15597] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2381.730891][T15597] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:21 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:21 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x36000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:21 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:21 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:21 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:22 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:22 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2383.260738][T15603] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2383.315230][T15603] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2384.159118][T15633] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2384.167489][T15633] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:24 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x36000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:24 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:24 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:24 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x600300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:24 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2385.804429][T15681] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2385.816414][T15681] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:25 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:25 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:25 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:25 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:25 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:26 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:26 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2387.784604][T15712] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2387.797409][T15712] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:27 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x600300}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:27 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:27 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:27 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:28 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2389.216398][T15729] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2389.234552][T15729] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2389.589114][T15748] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2389.598583][T15748] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:29 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8a0a0000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:29 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:29 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:29 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:29 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:30 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:30 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2391.207508][T15755] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2391.372677][T15755] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2391.876242][T15787] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2391.884767][T15787] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:31 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0ffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:31 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:31 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:31 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:31 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x7000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2393.349167][T15788] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2393.360441][T15788] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:33 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:33 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:33 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x8000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:33 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2393.744877][T15834] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2393.761290][T15834] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x40041, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:34 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2395.564223][T15840] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2395.606937][T15840] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2396.145707][T15871] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2396.168488][T15871] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:36 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:36 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:36 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:36 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:36 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2397.483060][T15873] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2397.493300][T15873] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2397.879101][T15917] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2397.893024][T15917] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:37 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:37 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:37 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:37 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:37 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:38 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x23000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:38 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2399.600163][T15923] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2399.650604][T15923] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2400.068022][T15954] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2400.076348][T15954] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:39 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:39 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:39 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:39 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:39 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3a0b0000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2401.551526][T15956] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2401.559756][T15956] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2401.951638][T15998] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2401.959903][T15998] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:41 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:41 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:41 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:41 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:41 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:42 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x40000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:42 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x0, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2403.644071][T16004] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2403.678237][T16004] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2404.053111][T16034] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2404.061606][T16034] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:43 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:43 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:43 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x650a000000000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:43 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:43 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2405.462711][T16044] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2405.482398][T16044] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2405.862462][ T3251] ieee802154 phy0 wpan0: encryption failed: -22
[ 2405.868801][ T3251] ieee802154 phy1 wpan1: encryption failed: -22
[ 2405.904681][T16076] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2405.913053][T16076] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:45 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:45 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:45 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:45 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:45 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:46 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:46 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2407.928319][T16077] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2407.959785][T16077] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2408.465507][T16114] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2408.494661][T16114] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:48 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x7000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:48 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81}, 0x0, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:48 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:48 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:48 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2409.655375][T16163] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2409.681442][T16163] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:49 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xffffff9e}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:49 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:49 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:50 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffff000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:50 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:50 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:51 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2411.488803][T16169] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2411.504443][T16169] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2412.220585][T16185] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2412.229237][T16185] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:52 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:52 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:52 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff7f00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:52 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:52 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffff9e}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2413.120593][T16205] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2413.145431][T16205] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2413.538425][T16239] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2413.547129][T16239] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:53 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:53 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffff0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:53 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:53 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xffffffff00000000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:53 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:54 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2414.901563][T16255] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2414.909805][T16255] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2415.380612][T16275] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2415.389217][T16275] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:55 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:55 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:55 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x60030000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:55 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xfffffffffffff000}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2416.702528][T16279] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2416.711008][T16279] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:37:56 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xffffffff}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:37:56 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xf0ffffffffffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:56 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:56 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2417.080481][T16322] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2417.091204][T16322] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:37:57 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x100000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2418.952433][T16327] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2418.978253][T16327] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2419.536452][T16355] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2419.545711][T16355] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:37:59 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:59 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:37:59 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x200000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:37:59 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:00 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2421.189275][T16361] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2421.204023][T16361] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2421.746300][T16369] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2421.770365][T16369] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2422.169628][T16375] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2422.178590][T16375] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:02 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x2)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:02 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:02 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x400000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:02 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:02 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x2}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

[ 2422.577624][T16407] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2422.593786][T16407] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:02 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:02 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2424.214374][T16416] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2424.289607][T16416] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2424.708722][T16465] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2424.719353][T16465] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:38:04 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3f000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:04 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:38:04 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x700000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:04 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2425.955533][T16470] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2425.976229][T16470] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2426.541154][T16473] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2426.554691][T16473] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:06 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x4)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:06 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:38:06 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:06 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x800000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2426.941616][T16484] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2427.014087][T16484] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2428.296889][T16516] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2428.305572][T16516] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:08 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:08 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0xe00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:08 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2429.391188][T16532] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2429.409256][T16532] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2429.828329][T16562] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2429.839438][T16562] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:09 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x40000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:09 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(0x0, 0x0)

02:38:09 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x1f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:09 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:10 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2431.280893][T16568] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2431.296924][T16568] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2431.751505][T16586] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2431.759736][T16586] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:38:11 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x8)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:11 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:11 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:11 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x2300000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2432.544756][T16591] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2432.565371][T16591] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2432.996181][T16617] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2433.004726][T16617] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:12 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x8}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:12 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:12 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2433.839689][T16624] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2433.850177][T16624] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:14 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x60000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3a0b000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:14 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:14 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2434.293349][T16657] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2434.310093][T16657] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:14 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x3f00000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2435.517680][T16671] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2435.547781][T16671] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2435.956688][T16689] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2435.966893][T16689] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
02:38:15 executing program 5:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0xe)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:15 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:15 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x4000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:15 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x401ffc000)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

[ 2437.127291][T16704] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[ 2437.166339][T16704] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2437.563918][T16722] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2437.572628][T16722] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
02:38:17 executing program 0:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, 0x0, &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
r4 = getpid()
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000200)={0x1, 0x5660, 0x22dc})
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r4, 0xe, r1, 0xa)
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r3, 0xd, r1, 0xa)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0xe}, 0x0)
sendmmsg(r5, &(0x7f0000000280), 0x0, 0x4040000)

02:38:17 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:17 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x6000000000000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

[ 2438.407491][T16729] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[ 2438.448665][T16729] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2438.872317][T16758] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[ 2438.880571][T16758] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.5'.
02:38:18 executing program 3:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), &(0x7f0000000340)=@v2={0x2000000, [{0x7, 0x8}, {0x100, 0x1}]}, 0x14, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x9effffff}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:18 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x81, 0x7}, 0x40041, 0x8468, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x74ff563b}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)

02:38:18 executing program 4:
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x0, <r0=>0xffffffffffffffff})
fsetxattr$security_capability(r0, &(0x7f0000000300), 0x0, 0x0, 0x2)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = getpid()
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x6, 0x3, 0x1f, 0x0, 0xfb, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x40000, 0x38, 0x1, 0x2, 0x7fff, 0x5, 0x3, 0x0, 0xff, 0x0, 0x80}, r3, 0xe, r1, 0xa)
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(0x0, r2, 0xd, r1, 0xa)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x9effffff00000000}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x4040000)

02:38:18 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0xfa04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(r1, &(0x7f0000000140)='./bus\x00', 0x102, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto(r1, &(0x7f0000000180), 0x0, 0x4008005, &(0x7f0000000340)=@sco={0x1f, @none}, 0x80)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2000, 0x0)
sendfile(r1, r2, 0x0, 0x401ffc000)
fallocate(r0, 0x0, 0x0, 0x80019c)
perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x2)
creat(&(0x7f0000000280)='./file1\x00', 0x0)