ngine, BIOS Google 01/01/2011 [ 770.971236] Call Trace: [ 770.971258] dump_stack+0x188/0x20d [ 770.971280] should_fail.cold+0xa/0x1b [ 770.971298] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 770.971313] ? __lock_is_held+0xad/0x140 [ 770.971339] __should_failslab+0x115/0x180 [ 770.971356] should_failslab+0x5/0xf [ 770.971369] __kmalloc_track_caller+0x2cb/0x770 [ 770.971382] ? kstrdup_const+0x53/0x80 [ 770.971404] kstrdup+0x36/0x70 [ 770.971418] kstrdup_const+0x53/0x80 [ 770.971434] __kernfs_new_node+0x9b/0x680 [ 770.971451] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 770.971470] ? retint_kernel+0x2d/0x2d [ 770.971501] kernfs_new_node+0x92/0x120 [ 770.971522] kernfs_create_dir_ns+0x48/0x150 [ 770.971540] sysfs_create_dir_ns+0x127/0x280 [ 770.971555] ? sysfs_create_mount_point+0xb0/0xb0 [ 770.971569] ? net_namespace+0x1/0x40 [ 770.971584] ? net_namespace+0x9/0x40 [ 770.971680] ? device_namespace+0x8c/0xc0 [ 770.971710] kobject_add_internal+0x29d/0x8c0 [ 770.971744] kobject_add+0x150/0x1c0 [ 770.971762] ? kset_create_and_add+0x190/0x190 [ 770.971791] ? get_device_parent.isra.0+0x24e/0x550 [ 770.971825] device_add+0x3a4/0x1660 [ 770.971849] ? uevent_show+0x370/0x370 [ 770.971866] ? __lockdep_init_map+0x100/0x5a0 [ 770.971891] netdev_register_kobject+0x180/0x3b0 [ 770.971914] register_netdevice+0x7f7/0xf50 [ 770.971937] ? netdev_change_features+0xb0/0xb0 [ 770.971963] ? macvlan_changelink_sources+0x2c4/0x560 [ 770.971987] macvlan_common_newlink+0xcaf/0x14c0 [ 770.972007] ? macvlan_common_newlink+0x14c0/0x14c0 [ 770.972023] rtnl_newlink+0xf03/0x1440 [ 770.972049] ? rtnl_link_unregister+0x230/0x230 [ 770.972065] ? event_sched_in.isra.0+0x5d2/0xbd0 [ 770.972092] ? perf_pmu_nop_int+0x5/0x10 [ 770.972110] ? group_sched_in+0x169/0x3b0 [ 770.972133] ? flexible_sched_in+0xc8/0x9b0 [ 770.972155] ? visit_groups_merge+0x45f/0x550 [ 770.972171] ? pinned_sched_in+0x9e0/0x9e0 [ 770.972185] ? mark_held_locks+0xf0/0xf0 [ 770.972206] ? __lock_acquire+0x6ee/0x49c0 [ 770.972225] ? kvm_sched_clock_read+0x5/0x10 [ 770.972261] ? lock_downgrade+0x740/0x740 [ 770.972276] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.972293] ? __lock_acquire+0x6ee/0x49c0 [ 770.972316] ? retint_kernel+0x2d/0x2d [ 770.972341] ? mark_held_locks+0xa6/0xf0 [ 770.972361] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.972386] ? mark_held_locks+0xa6/0xf0 [ 770.972404] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.972463] ? mutex_trylock+0x1a0/0x1a0 [ 770.972485] ? rtnetlink_rcv_msg+0x3c3/0xaf0 [ 770.972515] ? rtnl_link_unregister+0x230/0x230 [ 770.972544] rtnetlink_rcv_msg+0x453/0xaf0 [ 770.972587] ? rtnetlink_put_metrics+0x520/0x520 [ 770.972601] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 770.972617] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.972634] ? find_held_lock+0x2d/0x110 [ 770.972655] netlink_rcv_skb+0x160/0x410 [ 770.972671] ? rtnetlink_put_metrics+0x520/0x520 [ 770.972688] ? netlink_ack+0xa60/0xa60 [ 770.972720] netlink_unicast+0x4d7/0x6a0 [ 770.972741] ? netlink_attachskb+0x710/0x710 [ 770.972767] netlink_sendmsg+0x80b/0xcd0 [ 770.972789] ? netlink_unicast+0x6a0/0x6a0 [ 770.972801] ? move_addr_to_kernel.part.0+0x110/0x110 [ 770.972825] ? netlink_unicast+0x6a0/0x6a0 [ 770.972838] sock_sendmsg+0xcf/0x120 [ 770.972852] ___sys_sendmsg+0x803/0x920 [ 770.972868] ? copy_msghdr_from_user+0x410/0x410 [ 770.972880] ? __fget+0x319/0x510 [ 770.972900] ? lock_downgrade+0x740/0x740 [ 770.972917] ? check_preemption_disabled+0x41/0x280 [ 770.972936] ? __fget+0x340/0x510 [ 770.972954] ? iterate_fd+0x350/0x350 [ 770.972967] ? vfs_write+0x2e6/0x550 [ 770.972985] ? __fget_light+0x1d1/0x230 [ 770.973002] __sys_sendmsg+0xec/0x1b0 [ 770.973015] ? __ia32_sys_shutdown+0x70/0x70 [ 770.973026] ? vfs_write+0x15b/0x550 [ 770.973051] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 770.973062] ? trace_hardirqs_off_caller+0x55/0x210 [ 770.973076] ? do_syscall_64+0x21/0x620 [ 770.973095] do_syscall_64+0xf9/0x620 [ 770.973113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.973125] RIP: 0033:0x45c479 [ 770.973139] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.973147] RSP: 002b:00007fabc7db1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.973164] RAX: ffffffffffffffda RBX: 00007fabc7db26d4 RCX: 000000000045c479 [ 770.973173] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 770.973181] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 770.973189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 770.973196] R13: 00000000000009f9 R14: 00000000004cc71a R15: 000000000000000c [ 770.973501] kobject_add_internal failed for macvlan2 (error: -12 parent: net) [ 771.580047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=26806 comm=syz-executor.2 18:10:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x2, 0x7, 0x0, 0x400000000000000}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x80, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8e1a00"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000040000000a000100727376703600000038000200d1030600300001000900010067616374000000001c00028018000200000000000000000000000000000000000000000004000600"], 0x68}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000002c00270d000000000000000000004dd8c40c5d108ec5b4f6cecf9b3063e7002e3400736d21fff1483f00000000", @ANYRES32=r7, @ANYBLOB="0000000000000000040000000a0001007273767036000000200002001c000600180001000900010067616374000000000400028004000600"], 0x50}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000100339ecefed561dad8716b311be5695169", @ANYRES32=r12, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) 18:10:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x90020020}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x5c00) mq_open(0x0, 0x842, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x2601) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x9954651a009f9fa7, 0x0, 0x0, 0x0, 0x9}, 0x1f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x737) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x80000001, 0x4, &(0x7f0000000480)=[{&(0x7f0000000380)="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", 0xff, 0x9}, {&(0x7f0000000540)="37a6f570b0ac1aaa49b35feb14e28884e65cd5d1cfdb7aeef7d39244e8153754a285d79c0a02f4e444dc2370d8afa985ab8368eb295feceb96000df9341811860a4e1c2912aacb437c4a5a58cfd4654ddca8c572ecf26ebec53f0fc8d535fd4cc690292ba48cf98360777ad499edc161e3683f96247fa036aba38cf99f5857219d3953a32e93d67aefa7eb5e510ef7c8e24a00fdc42cc777fd78ee5eac2641dd79e3c428465715a48fdd18e1ec", 0xad, 0x1}, {&(0x7f0000002400)="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", 0x1000, 0x4}, {&(0x7f0000000600)="db4319f0316fbaa5bdb6f29b6183e98b1d50a31ad6317c92e08c6d63e0896f03a9157e85e941e7491aca4c65a8cbd96aa406025c240ac5eb73a9993284470fccc2c0aaec7f54c7061b50afd415159effe340d878dcf23cddadc10189f39c6b0d22d4a0652642ef83669516006eca30adbb462c8e831ba6316d17b38174f4ccca06519128bbb824f4f4778bd9bc098ebd09c152db4eaf479f6d38a857829176a33316dc2c3a1545ca9221a7ca81deb92522f26eb3f1ba8f3f38637a0a7f7bd906f0bba770257615ad", 0xc8, 0x81}], 0x0, &(0x7f0000000700)={[{@degraded='degraded'}], [{@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fsname={'fsname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) [ 772.304559] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170007000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x90020020}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="276c5bd6f0db828036f59b152925d176a9e51a4722f8fd829657ff48969c3c5f309ceaf42e7b242b7fe4fa128061aec9827004000c31fd9e31cb1c79990c2b89045ea4dc3ad63a775c80850ea10827e8a40a6c8b5fa7cc514639bb99f13c6a3d0825a738a1a53433042c75230d368c95f8a0b5562b58ecf50fd78e5def7375cd62fb5728535bf371b2ffc7d8058398075e1d0a7a4451395c39f79c26b7287cebd130de7737e77714686b9d67d87a3cf8da02cc70fdc99c1a7c916ae542b9d5baaf1f9daa4fb845fd5d5cad2073a61ce51c345150f84b3900997296d55c7d394af17b01d445465ef377508a1a29a5d6b03b0da22c973f22814fb2a802d50fb1f051e7d95d53d598a0599ec79cd27123fa1d13b7996609d4548e81ef7b1e8de8f32593ef46c3081ab55929a3c1cb1fa28a485518391a76b7b80d5941aa42222cb6f25be29ebc938af75971ffffdd4dea114ac37f38e69cb670020a7448d99b7b5e3d09bcf2625c94d6599182ce9edb0bbfea111dae3b1c9d6cd3162ce0aaebcdcf22a8d29dca0d04ebf5944168f398c500915579070586dff7a2ec6d345d1f69a8c749740aea0dbb2d30c9f7e3afd498a886c906fe09a83322d8e94b3ebe288ec1601e6a16122fa44191b6b3f5315eb0b35cb628540438919b906502eeb7cacc7d15753e456b056e6145ab65ac7c01253f3c5663495a74a0598feed07436a72d3ee1185d0fbcf89e8c5d449e0216cab8110efe923be24366dffc65bb386e7f015bb40b6fd9abbf7180b217f88d99f168c113f3ff187c202e2ae32a0238e43af612678a44a3d8373b6dc6bf820f8bf73e6411c51152f51993c66effe25c6e72a3127da6996f13691ded659e1f9d6eab1124435750dfeb60de2b2d59d9196bda3a3c5cd5054b2960481d50ce28ac4159b54f3f26a9decfc8ab36b6110eda741e21c95e3631b3de40fd3c7828fb0e3c85070eb233d4d4b1b75e0167ec62e81f1a12a0cd2e02a7a43edb384e4d0d59744bbe86611575966efe25b4191f14a368a72c13aeb4de7caff7a9439b583d08714fd22a9b1ff08297a562a859e2d21dd4f8ecf6701bcd9a30d28909c52c56a8ef739f0841ae895ad858121b1ec82ae1bbec856730aba8e2f42841c33caa862fdf8b651d90055b6725e5bf0af348ec550ad23c5a3c15c7455fdb13a57a6e452bdebbeb32200ab7dce3fab98b206ec2571e3de8904bea2265288dbaec64359cb5cd926dc025343fff78e7bdab6f541a3d2b569f37b8339d14e706163854d01ba5380d648391740e1fc2e118557692796acf6e0fa8ab21c5657259bf05a8b510eb285f306c8cdd6e185094b0ff46ec71d5a9b8e344176f263730468db893eaba00c32bdafdb1ebdc3ec441abaf4e7b2db744411ae02f33b340a373ea1a485b88073c2da7bd6828bbe4028fef4c30088c9b28daf899741029da8f52d2927250c582f16ca173c0761ad74364f562f3106a15d17d34ff27abc49b8a7d9aa3d2d2bd5c406c9fe21e59ffad1a85c3d1283f983efaab087a92ce4bc66c934605b658f56857301278b09f5e22ba0034a3944ae27bd20cf9cd4a7d1973d4818716d0bf71d922d74ef68ede2604a98f6db652206e0a34ceed21cb950eebbee9686fc368e2b42f9417b22ab84c1a341630f962560900e02f20cc0ed618e657fe4ede15f9a105620dd2206dbd74ba7f061f2d058a127f5ecb72ad12264d81816d82169d668adf80bbdd279c684e11980f72ba126d0326dbfe6736d2b737069e0c5efb7e76276f10fa915907d91282084fa9a12c5636fd265ef705f49adc9924ffcc68742b17c9212fe8abcc49e4db91ee543a7fd438e59d030d6fa1c31ebe151f9c44af0069df608f0395159c41339aaf31b4c3e67526036c7f4d96fdd5afa5c4c85f2a6648098dccd6a49a8250e26bce3ca0e78976c961432783947e3a8ff5430af9cfebf3d2ee72153b7bd4d7f2cce79da6defba02cc5a73f7fa137c01a2cea52a961d9504d959aec7e2627fc33d07ef45bb8afbded876bee54c7f2feacf548bbab68a782e7bbcb6140d6c6b3fbe1108a6f4dd750c0424a9e1e0b8f239c4739f28463a23fe011cb8c98e25126c5693f19f16ab8a4b6351ff2955a397c3618ae47c78b2d123c334082f9aae0d7f9e7b761d58ef7e1f6dd20a23c7bcc3e84dbc75551573c425e5d56ca84e263b22c2ed5ff1255e500c1810574ff1af28114221fa6e72439d5fc117700bf5a7e01e2ffc0cfeabfddb8ae217a7033c9c8dce5a685ca7a0f4ceeb153ab2ae77652e1d73e9510f868b70270e386664ab4c45ddf353e61aef1ac0c673502b7e7faae557df3eaa5fd0a3a00c54f23723ce6406f616f678b6f789c57e09864895dd8a1e5da9ff0bc7be9f9174af99e157e4c71ed69c71783abb3ad18141d99e49ef32614b8ac29eb50f64b2355f4b599acbdf039877d68275a2ebeb0729791412dfd3194cc2cb4f045a4d2ac74afffec582df03ce4afd2aedc594c6cd34a4cd21d4ea653b04d49a8aa1e942df36b530c90d0c2c62ef8369677ce2ffd4304b0410ff9ef86be8afbf55adc6abca02acf03dcab2fe5339ab0eb9d79dfc4817c5e2c10676904192395d9b8552760b0fa79add2769284a0ef5ebc4d61e64dc9a8b2d4770cdb4be4345026f6d04549140f4bb01e8252eb06d70afd84247f8023a0cc31329499a0efcd8a79e0832992a96b437258ab186c6a9c8f2e55fe7319605453b888d928730a11a11b4f56eec25b4c18b2205aad508a9f6850e6e23103a517cf43af019d54593803b76a3529777a58441d781d2eb509fcb723ba3be91d12c809f0148095e2066e1b0f0656ceeb751ad610e265bd4bc1b67f5e521ef420420e9b7e137f29240d63a42d678c1739f33f39a09a0f4c5249f808f41152a07ce9bfcc94e35683bea83f82a5e34e1fef3f8ea2cf4c9f1c8ccef87d7f58fc1b4ace6cb667e62ed1f54f72b3a156551d96f9a16ff4864ae3a01dc86b5c65e6676493f07d7257b34d8c6c5851334a4542dd2bea4aef4f444b5f26ac89a27e3313a4a66bdad09382357f1adbd61d526a2541022814cc4b2515aec30f74729d1a5826a3206c02ccd6adfb6c2b6c7aee33b7213bdbc5878151b50d1a8fdc1b2b9b44a01606770028723c848e1faf60b89de5a2e72b7d19f7745f7c89989ab2a8174291ad7d0f2b172672aba9f4a1b42df53baf6d353b45d755eff7526efa8a87a2aeaf84d9a434e8844a98eab172fa474b353f19e1231aca846d93eb24e650e015a42c578d23d794c02304ff72e358ea5c75f6709e587951d3900b3b1066ddd4a2fe9186d0cfcfcc7e33e9b882e8c2242ba990face580f94d66bb6a5212190fba3c1f1e046738c422d9e94ed6671157af9145bcfe7fd0d431a7a7c84a3eec802794286e2dc2b59e93fcb09ea22a1e47ee8f0b3cf756fb67bc3676819cbc67396322ea6be61552533b52a2fd258e82dc7c57a09211cce3e785f5b4deacae7b9dcd48080c9edb03d935c9c9a426bb6d3ec71e559af61b796827b5e425c991d3485381e0842b35cb0ad91154f4a13117b35d2a9ebfcf0ef68d73093dd483923f7b3a00e9c04c0eec31effc9f908f38949e1766409fc9c8cc48f95d4d537520159dd794edb56e824d31c67d9c7cbefdb51860a8d1f859baa9bf5c2752d00b6969e94d47a88be798f6df9e6b5977a56206c33a38e74ac5de0b23489c9f5a037e13ae0194beb9f954c6b8ebefa78194a4e891c12ddb43019e60d9b8e7fe78df65a83671b76fd1a9c7be064c6d822bb0749d2162168821484ab78f906cb990167a2f9e19a33be2086dd55e54cb8b6dbcd6d1cc9b4c828472d55db6f175547f73db54d142f290ef99e8e26f2c6ebc7a53bfe31fe1eb2ac6a13dd0081debcc346cc0d3407ff158bc48a314a18b7fa781e32b66f9eaa792031567fa8d5c33fd85ebf85af958ef84c0c69f2bc3f842bff08b4b3112a6ac24a78c9476f15d40de489e50fb5e426167a10739db436cb1a63f5e7b3baf7c21c3506d3021c487ce4625f66a18468c89c3a9c94c7c1c2676e1f21a26bc393cf83e7bdf9bf66c2e9dd080574e1a80fe152124e5191c9367f22b4a712322986165964ccc2b016f0fc52e69d009a2f9fc13f344153f17bcebf937f59714f44dfdc11e69c7216cdb4f4d2143222e41d7415b3ef52e45477f62def841cea29c6258a2a2d8c7895712c51025ed7fd5d68bf8aa5a96fbbba98090dac42ad69522f47288af9f6f7acd2406c42706a940300ab41a59488966dc63f4ce8a6e6e7b18c1cf7b3e5013441ad0d7f201343e4a64da2cd513782877cb35d00f2113147ec4d7410971968daa76b1b9ad115c9ef6e8fe6abeb8b372806dbccb26f504f3fb8fb26c97fc6dcc7091f2f940e76fc121b39f215cb5ee96383b0ad5dcb2f7671e1d75612b3992a8bfd9ef25545b75845991f64a26c87a8abbdde668be3e6fb8ebdc31e73eb4eafda15215e0b545907a86c0fa3d5f1af4cf096cd7ec9c31dd57851203a2ce0c4cfecefe63e43ec9335f00fe3195965d0602bdf0fb36a8b4c6a538f18c002895f4d33968901c0228fbbfd250ae07075c9c3d8e3233027ca1ba82586797b9c3fd5c256c9562789f4393908ecba4bbd26a49672d71098198efe77b3661a2114c3b919330e67cd0ae6e90d88e1922750b6d36bde8926f9c635fbe0b1016f016af69965d762ebcab348ea4fe695007c9e1f91b8f7019a3206627751c8216dae9857569f152888ba8876b51d5d73bffb3c5544500e1121d72a0d2ca9b382bae36c36fdb5680b5973ec3529eefc2077654f5ec0021d473c221d544d6c0b56c48926ece451f01bd3b2746f6ccb0a44a2e934eefbc24c8f4ced796e4941bb6363d2bf0af8834e0dde49632c228477fcbae8d6667c5996aeb14eac620e35a1b3a3b29c4122c91f92a2f9917291c04cfb9ef91215d8b0dffccd082474c9a2ee26ab2139d4428c74efd41f820d671b4255253abad18028b4d19715ba084eaa884dcc975da4c316ac3f8c056a2dc1215bd1db2fd504169e6dab0494bc8e02d4374f061c517d424b0050b678fb240df83d19c0f9a71465541f706cf976f6f653a216dc290698158864c941067577cc0b54c8ccae532de0ec0ddc67d4a22f5c9dcee990b7ae21567991bb1fa1f83d51114f00248735a3b884311b695a65fe6671db499588fd69c79baa8962d6f4331e3dda9b3d7075b2240d58cbe88521c4bfab84066a6b69fbcbc3cb6cbf", 0x101d0}], 0x1}, 0x5c00) mq_open(0x0, 0x842, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x2601) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x9954651a009f9fa7, 0x0, 0x0, 0x0, 0x9}, 0x1f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x737) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x80000001, 0x4, &(0x7f0000000480)=[{&(0x7f0000000380)="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", 0xff, 0x9}, {&(0x7f0000000540)="37a6f570b0ac1aaa49b35feb14e28884e65cd5d1cfdb7aeef7d39244e8153754a285d79c0a02f4e444dc2370d8afa985ab8368eb295feceb96000df9341811860a4e1c2912aacb437c4a5a58cfd4654ddca8c572ecf26ebec53f0fc8d535fd4cc690292ba48cf98360777ad499edc161e3683f96247fa036aba38cf99f5857219d3953a32e93d67aefa7eb5e510ef7c8e24a00fdc42cc777fd78ee5eac2641dd79e3c428465715a48fdd18e1ec", 0xad, 0x1}, {&(0x7f0000002400)="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", 0x1000, 0x4}, {&(0x7f0000000600)="db4319f0316fbaa5bdb6f29b6183e98b1d50a31ad6317c92e08c6d63e0896f03a9157e85e941e7491aca4c65a8cbd96aa406025c240ac5eb73a9993284470fccc2c0aaec7f54c7061b50afd415159effe340d878dcf23cddadc10189f39c6b0d22d4a0652642ef83669516006eca30adbb462c8e831ba6316d17b38174f4ccca06519128bbb824f4f4778bd9bc098ebd09c152db4eaf479f6d38a857829176a33316dc2c3a1545ca9221a7ca81deb92522f26eb3f1ba8f3f38637a0a7f7bd906f0bba770257615ad", 0xc8, 0x81}], 0x0, &(0x7f0000000700)={[{@degraded='degraded'}], [{@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fsname={'fsname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) [ 772.349173] FAULT_INJECTION: forcing a failure. [ 772.349173] name failslab, interval 1, probability 0, space 0, times 0 [ 772.454650] CPU: 1 PID: 26811 Comm: syz-executor.4 Not tainted 4.19.107-syzkaller #0 [ 772.462578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.472084] Call Trace: [ 772.474693] dump_stack+0x188/0x20d [ 772.478459] should_fail.cold+0xa/0x1b [ 772.482368] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 772.487484] ? __lock_is_held+0xad/0x140 [ 772.491572] __should_failslab+0x115/0x180 [ 772.495934] should_failslab+0x5/0xf [ 772.499761] kmem_cache_alloc+0x29f/0x710 [ 772.503924] ? memcpy+0x35/0x50 [ 772.504785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40499 sclass=netlink_route_socket pig=26819 comm=syz-executor.2 [ 772.507222] ? kstrdup+0x56/0x70 [ 772.507241] __kernfs_new_node+0xd2/0x680 [ 772.507259] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 772.507280] ? kernfs_dop_revalidate+0x3b0/0x3b0 [ 772.538718] ? retint_kernel+0x2d/0x2d [ 772.542618] kernfs_new_node+0x92/0x120 [ 772.547565] kernfs_create_dir_ns+0x48/0x150 [ 772.551993] sysfs_create_dir_ns+0x127/0x280 [ 772.556932] ? sysfs_create_mount_point+0xb0/0xb0 [ 772.561788] ? net_namespace+0x9/0x40 [ 772.565612] ? device_namespace+0x8c/0xc0 [ 772.569768] kobject_add_internal+0x29d/0x8c0 [ 772.574274] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 772.578884] kobject_add+0x150/0x1c0 [ 772.582597] ? kset_create_and_add+0x190/0x190 [ 772.587196] device_add+0x3a4/0x1660 [ 772.590921] ? uevent_show+0x370/0x370 [ 772.594803] ? __lockdep_init_map+0x100/0x5a0 [ 772.599314] netdev_register_kobject+0x180/0x3b0 [ 772.604079] register_netdevice+0x7f7/0xf50 [ 772.608410] ? netdev_change_features+0xb0/0xb0 [ 772.613078] ? macvlan_changelink_sources+0x2c4/0x560 [ 772.618289] macvlan_common_newlink+0xcaf/0x14c0 [ 772.623055] ? macvlan_common_newlink+0x14c0/0x14c0 [ 772.628077] rtnl_newlink+0xf03/0x1440 [ 772.631980] ? rtnl_link_unregister+0x230/0x230 [ 772.636653] ? event_sched_in.isra.0+0x5d2/0xbd0 [ 772.641428] ? perf_pmu_nop_int+0x5/0x10 [ 772.645486] ? group_sched_in+0x169/0x3b0 [ 772.650183] ? flexible_sched_in+0xc8/0x9b0 [ 772.654518] ? visit_groups_merge+0x45f/0x550 [ 772.659004] ? pinned_sched_in+0x9e0/0x9e0 [ 772.663252] ? mark_held_locks+0xf0/0xf0 [ 772.667315] ? __lock_acquire+0x6ee/0x49c0 [ 772.671578] ? kvm_sched_clock_read+0x5/0x10 [ 772.675997] ? lock_downgrade+0x740/0x740 [ 772.680256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 772.685453] ? __lock_acquire+0x6ee/0x49c0 [ 772.689706] ? retint_kernel+0x2d/0x2d [ 772.693601] ? mark_held_locks+0xf0/0xf0 [ 772.697659] ? _raw_spin_unlock_irq+0x50/0x80 [ 772.702163] ? finish_task_switch+0x1db/0x780 [ 772.706659] ? switch_mm_irqs_off+0xbfd/0x13a0 [ 772.711364] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 772.716133] ? rtnl_link_unregister+0x230/0x230 [ 772.720794] rtnetlink_rcv_msg+0x453/0xaf0 [ 772.725042] ? rtnetlink_put_metrics+0x520/0x520 [ 772.729804] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 772.734395] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 772.739254] ? find_held_lock+0x2d/0x110 [ 772.743326] netlink_rcv_skb+0x160/0x410 [ 772.747403] ? rtnetlink_put_metrics+0x520/0x520 [ 772.752168] ? netlink_ack+0xa60/0xa60 [ 772.756099] netlink_unicast+0x4d7/0x6a0 [ 772.760181] ? netlink_attachskb+0x710/0x710 [ 772.764600] netlink_sendmsg+0x80b/0xcd0 [ 772.768673] ? netlink_unicast+0x6a0/0x6a0 [ 772.772909] ? move_addr_to_kernel.part.0+0x110/0x110 [ 772.778105] ? netlink_unicast+0x6a0/0x6a0 [ 772.782331] sock_sendmsg+0xcf/0x120 [ 772.786036] ___sys_sendmsg+0x803/0x920 [ 772.790105] ? copy_msghdr_from_user+0x410/0x410 [ 772.794866] ? __fget+0x319/0x510 [ 772.798320] ? lock_downgrade+0x740/0x740 [ 772.802497] ? check_preemption_disabled+0x41/0x280 [ 772.807695] ? __fget+0x340/0x510 [ 772.811154] ? iterate_fd+0x350/0x350 [ 772.814948] ? vfs_write+0x2e6/0x550 [ 772.818767] ? __fget_light+0x1d1/0x230 [ 772.822742] __sys_sendmsg+0xec/0x1b0 [ 772.826550] ? __ia32_sys_shutdown+0x70/0x70 [ 772.830970] ? do_syscall_64+0x4f/0x620 [ 772.835011] do_syscall_64+0xf9/0x620 [ 772.838817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 772.844008] RIP: 0033:0x45c479 [ 772.847220] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.866118] RSP: 002b:00007fabc7db1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 772.873845] RAX: ffffffffffffffda RBX: 00007fabc7db26d4 RCX: 000000000045c479 [ 772.881131] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 772.888405] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 772.896223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 772.903493] R13: 00000000000009f9 R14: 00000000004cc71a R15: 000000000000000d [ 772.961647] kobject_add_internal failed for macvlan2 (error: -12 parent: net) [ 773.037974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40499 sclass=netlink_route_socket pig=26819 comm=syz-executor.2 18:10:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delneigh={0x1b, 0x1d, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 18:10:36 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x90020020}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x5c00) mq_open(0x0, 0x842, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x2601) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x9954651a009f9fa7, 0x0, 0x0, 0x0, 0x9}, 0x1f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x737) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x80000001, 0x4, &(0x7f0000000480)=[{&(0x7f0000000380)="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", 0xff, 0x9}, {&(0x7f0000000540)="37a6f570b0ac1aaa49b35feb14e28884e65cd5d1cfdb7aeef7d39244e8153754a285d79c0a02f4e444dc2370d8afa985ab8368eb295feceb96000df9341811860a4e1c2912aacb437c4a5a58cfd4654ddca8c572ecf26ebec53f0fc8d535fd4cc690292ba48cf98360777ad499edc161e3683f96247fa036aba38cf99f5857219d3953a32e93d67aefa7eb5e510ef7c8e24a00fdc42cc777fd78ee5eac2641dd79e3c428465715a48fdd18e1ec", 0xad, 0x1}, {&(0x7f0000002400)="c478c9893bbd54dd95f15e13703e9f83b6647f46536a808f051a99b28550ba25e562e5b5a5606754eccb939663303430ef7d90f1ea2406128048b39e2d3b3846d8e9fe105f4d88959786d38e615df970b548cc61a31bca7dbf05637e74ef5474d6f95256acfd081e58a0748da62c0cf3ac770f2157352254faa2ad91a7a79e8b54fb7fd4c18e4c8692d829ea8a2ad0a96ee86d451dc2e80b979d40899ee8ade56d91b0234351fc0f556840c47b8769a26ddf8fde78a00439db0228f4f47271f3c1fdd3c8b0911e67086c5e1528a8149e3735f3da8bb0fdd94daca83d3f1282f5f6a72777bedfd2f1698d1b79f8c8bcc954aa5c73560de644b745aeb3acc801236641d9924c77d40ab42b004ed765911061bf7f1215fbbbf0c5b7498bbc857617f08250722547e526a350b618aad176a0b14e175db2859922c09aa35e1f9fc12f1cd2dc326cf7ce39c6055fc17f8ece8cadaa95b171475382ad8a861db46db97641532659db1479126c3dcdb891762189d9b3b86baec48beeceaffbedcf7a23ab86f24b283c13663c1fbb9754b9faf6be4bfb1559d0993be1f9560ccbd60b7f4dcfd085d0bf9d0b70541c4b782f94585e92883bf9d6a23c11f2deec27205159397ee7cd87b20ae5ec4f1257ca7acb0f7bf5b6e218a5d302f716b1f2099891943efe23218ada99aa31f15e33b28b5b3b94a0c2eaa4c11838a1c5cfdbf722bd3aa9bcc26922b265d6bc7ab4927543d5f4a6b060c4390ac64c6ef7768de4b616fbb68f01f62ab6a1f45a481cd9e6c41028a5aac6fc401910a536349b189863abcf3acc79c514d5a0e3464801771c41e3c7078732776c1084d8bb3bce8eda3fbbfc93057634d06fc625e8740c9ef65b53f16fdbc09a79c35ba47f2d06f052084b9b06ecbf695dcb151878b962465f1e03ab132817e3354c4325e684d259c590f140cea74a0c74a6592ed368cce46d29d07b34959b3228eb891bca75b79abf6783082e57e4dee7f7dfc194b2666b92532d4405b08d0925bcd45ee08efca4fe7119566377758aa4a7f15995d0409c7c33693b02276b693e4cc2a442cf31e8d19a3941a92550e52ef5be288d0a0693567f8b60a8894ba1e1c2b69eb1bfa2a986e7b5c9b5a4832874cb292d55da558bb58dcbb533ec83dc82dbb37a4107f05a19f846051f4cd23dba20ec010fc350141060207524e529ed1b21bce59b8bf7b524e543072e4860c4c3e4e58e8de73b1c653fd0cb5d52848949cb2ab6eaa0bd975b7bd26ae1f12c32bfc0a98247cfe41e9b247eeb4d54031c1be26538d9135dc165fedf33c7e6054a4f2c1b7cecece493d9545f7eee793dfb7dbcf9dcdb5deee999dbe347bc88bbf50e3d659b8708436f2b36880de1e2104f8dab83cd9043ae543a0d77d8cbf7fcb5463822107d9c26515df867d7a25f8cce5b3de2d352ebdc0b7387b3b60bd3ac3c28db5833f85f1aa91765f397d331604abcd131d01a6cf62db4a7d8c4de9057d253eba8a3edc4166c2451f731bf6c879ccd48ce204407cc5f2447210ab4560d0eb61b86e56ca03aa2e67433dba6e13777ffd2598ec7de9e4837ce9bc931e74f4b9f81f7795f4f1d6cf9fad9eab88e0d9ace8930538603741fd37c3b875b5f49ae3febc084fe077aa35b6ba47815a8ee6d4cd066e0b7e2e77c8246f4b9b8c61a17f2bcc6ab80db8b790249c6e7bafa5d725ad405d6b8ba7abed29550f28365ad0d6a44e1e251e7fce445eccc52227d2335b86ae1e4c88ef9957877d18ef9a14c6e1ba3c4fb87f2890d723eb88b01e3db3102895e099550f6ebe14f39367fec6c0175b56bb53b1ed04a354303e84ca606d427b1f623a9b0fada109b6e22efb71048419b92c68281d78881e1ecde756b9a7c8f284a8932ea6814de3da85ba834f72b43bfa163f184a349928d83243120bf4b5b79c0c8b59d880c3d1fb5dc00f7c7656cbefbe798ce72f5c8c22e43527d89300e561fa93802f9a454aec38f8e3bb68266f7b7862edc8f2aac9f316e73df3bcb8af365028bef61939ba270c3c4e7e6a88e38d175a407f7f8dda2bc199fe2b33639afa161377790af5f4651f42f1bbe20563f6393bdf3d7e0fea361ae4508eef6d895facb820e7e57601757ae444fafe3f662ec29b3adac94baf7631ee3fcbd675180db9d0ee4b4ef0c52718071062d2b5e1d064af67ae3cf3f40ce27afbce7e9bd6e92471329086926188abf70079b14118c4c7e2cec20261099a8500500079ef4c469220930d51296f9b9b8d67121e0b5b139c725583bc60d45154aba350353682592f44ecd9016d045448ef8dd5ce726b3adb928cf47a07231b7890e614183369e8e15538efb269da1870cd4a950dd1bb7fa0d6e4e6f1df54bdf82fb16d884ca3418fb8dfb3bb371cea9e5c580edf2e610d9d2a2c6924708cf7e17a4fb5fe57ae8c6995442502ec6796bee00ee2d53b7312801b154e389a9383009833cb68daa8793ea963213aa5c3a2abc0d8eb62ee1981af9d2fcb2dac2048f6c5632bdfbb35d42a30c9b292edbaeb11be5fd14b023182c5c79995eb638d2392c7ace7888ff64f4be047039b6649033518d5cca522d9e50e32f0f0e4d55f26bad3c943d547ef370150c2582999de128a2f1516e2341b9c0f115933e47504e84ba9bb1a2246913bbcf181b441d16467b953726377808d4dbce131e18c55ad32d9034feb183991dd7566922a9583be054a6411faa831fc96511962a177d08897ffd786e26df0566402cf7d7634d5b9ea688b7f2411b446b9809803144ce40f4f3da0584cc486ca6d98e6f2bd2cf67beac7e0e6b61cca375cf5f67c63819f1f5bdbe6c8a1e3caad6da6004abf838386dc8bf4539be1c85610dc1c6265cc0498da89d9b495a4122479aa6e834904e7d33c754543cdb4b3485d2e6ab039307d097c750fd99334d5fc57a63d30949bdfd8ac7684739eecec863f7b2b2db513759c53e78597c53a2e8286ad3f2ae676e65ada1affdec7733b66b1d24c2b9b93c9001000b9faeb9bfa41d56ced6c9824a9ac2cef6c1c8dd0141705eb149fbea845de46e2b511f10f4e79b1ceff71b883edee4939e98d012c310e59c03438a48b9f1e43059a748bd9f4889ec6e426c3dad76c241566e994edc913f2d6585339d709270e961beba45aa41d65fe6d7104815148582ebb7616cf2fc195f015eb7cb44011f47bae04fef986a328b23ed63edd5ba78019168bc673af3a4e449af73c9ee8318f0c4d61dbe88519d5d9abd02d9ce8ff3736d1e893b4052fc193d6c7a7c981dfb4a6c50b3215534fb1e2729fc325a803c86c83f2beceb7f87c72bb8b793f2f62e934aa5fec698555b4d8ee5c586ad7183824c0710ab353b02213dd0a4892972f51af7e2bae82a90f80f29c0ece895eb421ce609b35fdcd8d079cf683480bb1cd3ee49c43951dd65362e622282b24f149136fc881b723e93387f4cff0669de314991d032d52491b780fba929c523e69b198621ab156cfe58087a010280b48dfcfb7ddd0811bdb8ef4c0e4580c950b4b70e052188f5334e7f1ca47305efd6a2e94115b7e969e50510d370c924070f072455c688d98bd30e61d043224d05e1f65f3a757aff8e9c6da034d1dc2012c0248d2aa1a8b6173802f4e9a7ddcc01d11ac282cd79f2ead1a8e72b8b89693e4ae456c97a59d7b17fc5cb035a86ed6115234f3dfbf2525e6897c25ae8cbd7b0efcb60beedd884641a4bfa631d14b44186d03b1a211e956152ce7dd6a8097260f2065d3a496e33bd061caf63dfba2c54f4b92db2931a7f3d01bea252344dd9b1f27e45e43c3682b30819405ce9e13e73ba0b1553099078dbbe5a66fe0b71fa6674ce8bd2f98ebca908dbfcd4a5be62e301b4e79c2525d064d5101baed750cb84ca4e50cbf13fa5e512ff284efe57416b4dae99263a574098ea1aea9b0c9c8e8e2db4877ce0ad87fc2cf5ebacd7b4536dc100ec55af6dd1962a1b984d3e858e8bb358b8a190e4144e6b2eacce995610be835394778b5f63fcc27ad954d07fee1416e59f456d85db5fddcec2472de94135834b039d835ba8c749eaf8572648eadb37cf9c51cf63afba995b3ba6a3973ea09f73e35182c3f643ed6ce957feda168d0f15c3ae8840a7d1a2a4ca97131484eef81002a8a6992255133a18ce8a08b75fae75f6b37bd2466c288046697eec046ca4e8acd92ee234494c5e748deacea7c5202c8f979f10a12311f95c883cdb168390e7c4a5c9db49a5d399d40bfd65ab4b78edf604822fd92f41ade1957e3f854c40e7223e14b678f6c2783657b120daf3ba623fcf22c273b2d77e5269e70ba2f76c5efe184d1282ac8de476e756007977535c1a72765b823d958224124f40064218af53367e99f6d1065b7bba141a2060723b6299981355964b41967ec7d66ec5b70027b5fc57eec065eda2331152f1503ca8a1c9265de67cd6aaba3c7a744ecbd1960a12cbcff24b273a8f0c83c3aafec42c9d84f939db2f45e2569135cadce7a8d29791287b2a797a89cf56217d53ced34ed97d017e4ba21bdf3e72547869cd82feb3f1a5ce31ae03eadb2e34559df43804a79ab2b3474f9446c192a19f0f2d955b46b1b63572f3f18ed00592ae3b098aed210e13fc994fc283fcb3c62ab99f04a59f8a1f026ddbeee30015e258f177ca86cc5f759669811002d41f38ef9494ffcfb549609a9e310c3e7c5edbe27117c6f730f7a70abc8b8889b81ba6b8e47b2c3bf8409846bf584eb131fc631bc5d091687a4575247e08d12fa9791256856e0f0b619cf1d8ac40b135dda31b56649c7a3e7c076284531bb6519a79e765bfb25028fd5136f7f410976ef8f9c109ff01248a379bf6df1d5d7ad308296293812d5258a328e45c369ea91f36271024dff3cd4717051603db07473cd1fd3f62b2d71ad6ec5dd8aa45948d133764ba3f53a19d1f5082555488ca0a3f917ec672f53c671c562a5ea8f634bc7e9ebf6cb82d1f43590acff15e071497bc25e41a169c34198d95c8a83652ad8ada5187bb7d896814fa591b5d656e965c344d7e01e6c495607760fb41aae0b6e08490bfeedfb5b4c08f67555a01beaf2b69c7b83af16602ff8b9cfad3f0af90245c95b68151045c6823407b6f727601062f46af3be86706b8b3a78ffbee1a418008865a9aec4940d04fdb845e648a84be049fc5aebe4ed0fb7857ca1ae531e1ff2c38f07a61dc130f6b9b74acb9358993bc80473ac84c18b177c0b534edb124b9f58e1d4383f4f468b4f23c3c3af282df409dfefe7eea96f3f4fd145d05c440f5e96fe24f30b2ee7fbb9f12babf261b3f474fb1d9080b2537a7311c5147a0af04994b14417071b96905a14f6339d73c16120fd48a49a0d5f1daea324a1bd7819e671246616ee46f82f30a9647f3d86d8dc84ca6ff254a0c67c7ebffe98e147281376381d39fdbfd9a071112ae88fa74fca216315efd0d4a1006401e8bccf4b03efc6e596675fbf1ef2099b0f76d40711320105be03bf1080208ad5f7ddd4d64e5064528082d60328c84121d2665702a445527bf4a2e80491086983b1ffd9597c23a627aa720d515c82c6ffed4d671b96bb848dfa95edd094e08ab34bb6c11833bc4b8e4620099dd802cbd36d9b2f68353626ea173c9f103ffca50e314e97aa4b8bde3b854621b64d570fb6099b0217a92906357480fe303177d0dd60aafd0be8a374111bad80a2faf6f4228fb6ea51a830dc3aea8c39ec4120d2d86ac9ad7805b4d3a1ff9693c6d1d09e0013625231fbd6f6552a81345ff466f51e3418d886580c42c07e553c7e82bb74a40547259", 0x1000, 0x4}, {&(0x7f0000000600)="db4319f0316fbaa5bdb6f29b6183e98b1d50a31ad6317c92e08c6d63e0896f03a9157e85e941e7491aca4c65a8cbd96aa406025c240ac5eb73a9993284470fccc2c0aaec7f54c7061b50afd415159effe340d878dcf23cddadc10189f39c6b0d22d4a0652642ef83669516006eca30adbb462c8e831ba6316d17b38174f4ccca06519128bbb824f4f4778bd9bc098ebd09c152db4eaf479f6d38a857829176a33316dc2c3a1545ca9221a7ca81deb92522f26eb3f1ba8f3f38637a0a7f7bd906f0bba770257615ad", 0xc8, 0x81}], 0x0, &(0x7f0000000700)={[{@degraded='degraded'}], [{@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fsname={'fsname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) 18:10:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x983, 0xcb}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 18:10:36 executing program 2: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x2, 0x3, 0x2b0, 0x0, 0x188, 0x0, 0x0, 0x188, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8, 'conntrack\x00'}, {{@ipv6=@dev, [], @ipv6=@local, [], @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, [], @ipv6=@empty}}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x310) 18:10:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170008000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') [ 773.531868] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' 18:10:37 executing program 0: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="83"], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) [ 773.572073] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' 18:10:37 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x41, "845b037039d114a1762c2716c03bcece07660ede3767eeb024abbe46802167909536ebb92568d440460622a4a44d38e4cc07f33a8da7792bea767a4fb57f77748f"}) [ 773.627927] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:37 executing program 3: syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pipe(&(0x7f0000000200)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r1}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:10:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x90020020}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0x101d0}], 0x1}, 0x5c00) mq_open(0x0, 0x842, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x2601) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x9954651a009f9fa7, 0x0, 0x0, 0x0, 0x9}, 0x1f5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x737) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) syz_mount_image$btrfs(&(0x7f00000001c0)='btrfs\x00', &(0x7f0000000200)='./file0\x00', 0x80000001, 0x4, &(0x7f0000000480)=[{&(0x7f0000000380)="d4b2b5fc996c5f2dabc0dcfbf29c70b9dbc52a122cf2f6a7ace1c9955947ce2c31a7ed34d27053c7c5ac5fa01074395405594d530d50e61d7548a2537894a044f02b060a3c0d812fe572c856e630acde106e5658988872cf4f1e5f3dfa817ca7e7f6f2d33ffe474eea13d4f3fb06498bc0fd9be822572ca81438776ccbecf2def37ba6144a9b7ff74c25e58c68b477fde038bb6caed7ca883b90faece25ea17a0daa32b485170de161925466d1acb261e805fa18f2ff4a250c5c7dd09edd8d7a715e48ee7ec8541301313565ddbe1858178de6af575b7941d4f79e9345d3191abb3119cac1f5a728534f1fbfa719d9fcd7ac9572c334a2ec81557c25629c62", 0xff, 0x9}, {&(0x7f0000000540)="37a6f570b0ac1aaa49b35feb14e28884e65cd5d1cfdb7aeef7d39244e8153754a285d79c0a02f4e444dc2370d8afa985ab8368eb295feceb96000df9341811860a4e1c2912aacb437c4a5a58cfd4654ddca8c572ecf26ebec53f0fc8d535fd4cc690292ba48cf98360777ad499edc161e3683f96247fa036aba38cf99f5857219d3953a32e93d67aefa7eb5e510ef7c8e24a00fdc42cc777fd78ee5eac2641dd79e3c428465715a48fdd18e1ec", 0xad, 0x1}, {&(0x7f0000002400)="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", 0x1000, 0x4}, {&(0x7f0000000600)="db4319f0316fbaa5bdb6f29b6183e98b1d50a31ad6317c92e08c6d63e0896f03a9157e85e941e7491aca4c65a8cbd96aa406025c240ac5eb73a9993284470fccc2c0aaec7f54c7061b50afd415159effe340d878dcf23cddadc10189f39c6b0d22d4a0652642ef83669516006eca30adbb462c8e831ba6316d17b38174f4ccca06519128bbb824f4f4778bd9bc098ebd09c152db4eaf479f6d38a857829176a33316dc2c3a1545ca9221a7ca81deb92522f26eb3f1ba8f3f38637a0a7f7bd906f0bba770257615ad", 0xc8, 0x81}], 0x0, &(0x7f0000000700)={[{@degraded='degraded'}], [{@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fsname={'fsname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) 18:10:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x20000287, "845b037039d114a1762c2716c03bcece07660ede3767eeb024abbe46802167909536ebb92568d440460622a4a44d38e4cc07f33a8da7792bea767a4fb57f77"}) 18:10:37 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x0, 0x41, "845b037039d114a1762c2716c03bcece07660ede3767eeb024abbe46802167909536ebb92568d440460622a4a44d38e4cc07f33a8da7792bea767a4fb57f77748f"}) 18:10:37 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000695, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfdca) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000000540), 0x187, 0x0) [ 774.413987] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:38 executing program 5: pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) listen(r0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xbaa) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0}}], 0x31e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) socket$inet6(0xa, 0x0, 0x0) kcmp(0x0, 0x0, 0x6, r2, 0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @random}, &(0x7f00000002c0)=0x80, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xbaa) gettid() r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x8000) 18:10:38 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)={0x2, 0x62, "845b037039d114a1762c2716c03bcece07660ede3767eeb024abbe46802167909536ebb92568d440460622a4a44d38e4cc07f33a8da7792bea767a4fb57f77748f9cf9adcbea21e9a487e89a1b12fd81312de0c5d91fbbb53fd6c16f4aa89afa5b97"}) 18:10:38 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b0017000c000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:38 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@NDA_LLADDR={0xc, 0x2, @link_local}]}, 0x28}}, 0x0) [ 774.915568] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:38 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) dup2(r0, r1) syncfs(r1) 18:10:38 executing program 0: 18:10:38 executing program 0: 18:10:41 executing program 3: 18:10:41 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:41 executing program 5: 18:10:41 executing program 0: 18:10:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b0017000e000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:41 executing program 2: 18:10:41 executing program 5: 18:10:41 executing program 0: [ 777.995961] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:41 executing program 2: 18:10:41 executing program 3: 18:10:41 executing program 0: 18:10:41 executing program 5: 18:10:41 executing program 3: 18:10:42 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:42 executing program 2: 18:10:42 executing program 0: [ 778.685930] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170010000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:42 executing program 5: 18:10:42 executing program 3: 18:10:42 executing program 0: 18:10:42 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="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", 0xfa}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:42 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:42 executing program 5: unshare(0x2000400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5428, 0x0) 18:10:42 executing program 3: r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30}, 0x0) getpid() sched_setattr(0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000380), 0x80000000, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f00000001c0)={0x3}, 0x10) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffb}, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="230228efb4a24fe84689000080cb000000005d6fe0eb92552fba4784466e3edbcc3e06000000000000006c0e09d1ede6c1f37b9c352ef85800004380a8cf359a30a74dc68c37cfbef5c16f3e648860faf8228bf63bb3bf08002a74e3e6017fe72e8d5b7ce2dba5236e1882c601f2b49e32098f6919c7234cebfe065d74f23c995de2c3ab7b3881c92986a5aba827995c4ea91730307e8dd37bb4f3208526a3458fb76467b39c4ae9ccbed15d87e906a7169366f54516d7c3531d9b23a3eb197f4a3e"], 0x94) dup(0xffffffffffffffff) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 18:10:42 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x5) clone(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20400200) 18:10:42 executing program 2: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee0f0fc00008e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0970fe2b9a77f08add3eac478b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd62}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 778.945696] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:42 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="3376003639405cb45ba52f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05b119f9fc54301eae7f3b83f0692e664ebf60e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa9241eafb943d84a", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:10:42 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)) connect(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r4, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) [ 779.058129] ptrace attach of "/root/syz-executor.2"[27004] was attempted by "/root/syz-executor.2"[27005] [ 779.163603] ptrace attach of "/root/syz-executor.5"[27013] was attempted by "/root/syz-executor.5"[27014] [ 779.179698] ptrace attach of "/root/syz-executor.3"[27010] was attempted by "/root/syz-executor.3"[27011] 18:10:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170019000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)='Y', 0x1}], 0x1) 18:10:43 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) [ 779.589472] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 779.614663] SELinux: failed to load policy 18:10:43 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) rmdir(&(0x7f0000000500)='./file0\x00') [ 779.649969] SELinux: failed to load policy 18:10:43 executing program 0: unshare(0x2000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 18:10:43 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee0f0fc00008e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0970fe2b9a77f08add3eac478b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349faf11e931e7d6a4cf10ce619ad2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b1003f5435282d27194a232de4acfd96ca06d6c6c2ec7937c23b418118d2e3f904c989499190019750a400000000000000000000000000000000f7c6862db17ecb11c6f3a9c25255fd24d74c5846b79f2860", 0x124}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:43 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) tkill(r0, 0x28) ptrace$cont(0x20, r0, 0x0, 0x0) 18:10:43 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) unlink(&(0x7f00000001c0)='./file0\x00') removexattr(&(0x7f0000000100)='./file0\x00', 0x0) getdents(r0, &(0x7f0000001440)=""/174, 0xae) 18:10:43 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000180)='./bus/file1\x00', 0x1000, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000640), 0x24, 0x0) 18:10:43 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 780.048514] ptrace attach of "/root/syz-executor.5"[27056] was attempted by "/root/syz-executor.5"[27057] 18:10:43 executing program 5: io_setup(0x40000000008, &(0x7f0000000240)=0x0) r1 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_submit(r0, 0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0]) [ 780.096317] ptrace attach of "/root/syz-executor.3"[27059] was attempted by "/root/syz-executor.3"[27062] [ 780.243798] audit: type=1400 audit(1583086243.752:2147): avc: denied { associate } for pid=27060 comm="syz-executor.2" name="#2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 [ 780.327350] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170070000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:44 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee0f0fc00008e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0970fe2b9a77f08add3eac478b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349faf11e931e7d6a4cf10ce619ad2157df6b2bcb47f", 0x9c}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:44 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="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", 0x134}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd62}, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:44 executing program 5: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f00000003c0)='./bus/file1\x00', 0x0, 0x1) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000100)='./bus/file1\x00', 0x0, 0x12000, 0x0) 18:10:44 executing program 2: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlink(0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8001141042, 0x0) fchown(r2, 0x0, 0x0) 18:10:44 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 780.516613] ptrace attach of "/root/syz-executor.3"[27083] was attempted by "/root/syz-executor.3"[27084] 18:10:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x44d, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x268}], 0x0, 0x0) 18:10:44 executing program 5: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') 18:10:44 executing program 0: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 780.611062] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 780.752667] FAT-fs (loop3): Directory bread(block 2) failed [ 780.784997] overlayfs: failed to resolve './file0': -2 18:10:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$security_selinux(r4, &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0) [ 780.815197] FAT-fs (loop3): Directory bread(block 3) failed [ 780.821119] FAT-fs (loop3): Directory bread(block 4) failed [ 780.836938] FAT-fs (loop3): Directory bread(block 5) failed [ 780.854180] FAT-fs (loop3): Directory bread(block 6) failed 18:10:44 executing program 5: syz_mount_image$tmpfs(&(0x7f0000004f40)='tmpfs\x00', &(0x7f0000004f80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000005000)={[{@size={'size', 0x3d, [0x4d]}}]}) 18:10:44 executing program 2: r0 = eventfd2(0x5, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) read$eventfd(r0, &(0x7f0000000180), 0x8) [ 780.872490] FAT-fs (loop3): Directory bread(block 7) failed [ 780.881999] FAT-fs (loop3): Directory bread(block 8) failed [ 780.891565] FAT-fs (loop3): Directory bread(block 9) failed [ 780.900708] FAT-fs (loop3): Directory bread(block 10) failed [ 780.922991] FAT-fs (loop3): Directory bread(block 11) failed 18:10:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000250004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:44 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$inet(0x10, 0x8000000002, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60080000000000000001180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b0798910000000004", 0x46}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) 18:10:44 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:44 executing program 0: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) 18:10:44 executing program 2: r0 = eventfd2(0x5, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) read$eventfd(r0, &(0x7f0000000180), 0x8) 18:10:44 executing program 5: unshare(0x2000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) [ 781.383884] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002580)={@void, @val={0x0, 0x0, 0x20}, @mpls={[], @ipv6=@gre_packet={0x0, 0x6, "99fc9e", 0xf98, 0x2f, 0x0, @local, @mcast2, {[@routing={0x2b, 0x8, 0x0, 0x0, 0x0, [@ipv4={[], [], @empty}, @rand_addr="4cf3dbab6e2f08580b4f661f4979c1e1", @mcast1, @dev]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x900, 0x0, [], "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"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0], "ce032480a279209b3126c66ce8b999a763c60c2821d729f2d9aa3b1d775f12dff6773eeda0ba7b3d57767fd76281759c151b74bc56d10949c931602b06a9a5f07438ae7295f1ee8d705cc03a431774ddc3c38b0b2518c952363a00805a00ab6e76ec20ab11c03f3abf35aa68061bd93ea0789099a5040f211dd46bad3137f194bab0084ba07c301754ef6caebf5ed313bec48310ebd304dec3d09d4d8dc26e8ceb93e4290a47861c2ae8a13d1edc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "30e94101202ca00e1960079d2ba9dce0ea5e004de68a0ba5c1f57aaab95f0bd41bd56bf91d82ffd7d785cb6b3ffec306c902be83f9d9d31298cef173deeca378088e030db7f3376f8668d01376903c5c8ff2e7400f8c0f773fe1708dde066759"}, {}, {}, {0x8, 0x6558, 0x0, "a3b3aa6f1d072d761a6005f41d72b63a7fb938e3c4bdcfc4a2df13cffef0ad8c96b2e882fc89425357097dd7532250fdd2a46f4b90384e3444070690dc943c858499a25db767a6d75e571d99d5a091634d7ed4ac9d4f6f2fa79204f6"}}}}}}, 0xfca) 18:10:45 executing program 5: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/16, 0x10}], 0x1, &(0x7f0000000400)=""/68, 0x44}}, {{&(0x7f0000000500)=@generic, 0x80, 0x0, 0x0, &(0x7f0000000780)=""/70, 0x46}, 0xfff}, {{&(0x7f0000000880)=@ax25={{0x3, @rose}, [@bcast, @netrom, @null, @remote, @remote, @netrom, @default]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000900)=""/75, 0x4b}], 0x1}}, {{&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000ac0)=""/95, 0x5f}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000000bc0)=""/151, 0x97}, {0x0}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x6, &(0x7f0000000e00)=""/99, 0x63}}, {{&(0x7f0000000e80)=@phonet, 0x80, &(0x7f0000000fc0)=[{0x0}], 0x1, &(0x7f0000002880)=""/4096, 0x1000}, 0xffffff00}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001080)=""/120, 0x78}], 0x1}, 0xeab8b72}, {{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2, &(0x7f0000001580)=""/13, 0xd}, 0x100}, {{&(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001780)=""/64, 0x40}, 0x767}, {{&(0x7f00000017c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000004bc0)=[{0x0}, {0x0}, {&(0x7f0000004a80)=""/49, 0x31}, {&(0x7f0000004ac0)=""/25, 0x19}, {&(0x7f0000004b00)=""/184, 0xb8}], 0x5}, 0x8}], 0x9, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000854}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=""/187, 0x0) r3 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r2, r3, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) 18:10:45 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYRES32], 0x94) sendfile(r1, r0, 0x0, 0xa198) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0xfe) [ 781.512140] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.587051] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.644908] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.670157] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.691184] audit: type=1800 audit(1583086245.202:2148): pid=27162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17155 res=0 [ 781.737955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.759159] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 781.805992] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.823991] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.844192] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.872096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 [ 781.900703] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=27150 comm=syz-executor.3 18:10:45 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:45 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f00000003c0)='./bus/file1\x00', 0x0, 0x1) setxattr$security_capability(&(0x7f00000001c0)='./bus/file1\x00', &(0x7f0000000200)='security.capability\x00', 0x0, 0x0, 0x0) readlink(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000080)=""/164, 0xa4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) link(&(0x7f00000002c0)='./bus/file1\x00', &(0x7f0000000440)='./bus/file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 782.335089] overlayfs: unrecognized mount option "./bus/file0" or missing value [ 782.374509] overlayfs: unrecognized mount option "./bus/file0" or missing value 18:10:45 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@mcast1, 0x8e}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xfffffffffffffd71}, {0x0, 0x1e1}, {&(0x7f00000002c0)=""/66, 0x9}], 0x3, 0x0, 0xb9, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 782.437819] overlayfs: './file0' not a directory [ 782.626979] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002020000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:46 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="6653070002053c27bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee0f0fc00008e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0970fe2b9a77f08add3eac478b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad61421349faf11e931e7d6a4cf10ce619ad2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b1003f5435282d27194a232de4acfd96ca06d6c6c2ec7937c23b418118d2e3f904c989499190019750a400000000000000000000000000000000f7c6862db17ecb11c6f3a9c25255fd24d74c", 0x11e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:46 executing program 3: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="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", 0x126}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 18:10:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) pipe(&(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = dup(r1) read(r2, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0x0, 0x2}, 0x20) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 18:10:46 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000300)="8da4363ac0ed02000a4c00000001004d010000000000000000007a0000000000ff2000000000000000000000b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 18:10:46 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x13, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 782.755908] ptrace attach of "/root/syz-executor.0"[27192] was attempted by "/root/syz-executor.0"[27193] [ 782.783339] ptrace attach of "/root/syz-executor.3"[27195] was attempted by "/root/syz-executor.3"[27196] 18:10:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c05, 0xffffffffffffffff) 18:10:46 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) fchmod(r1, 0x800000100000024) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="31acee388648ccccb574b1441ae19237ca841492d4ee8992b2f366a18ccd5c5b7654568d75b3d56f2a177370f65c3951f61611810fbcd7393d3d304370785761df563b43ef2f5d0c199095e12371af0adf8ebe00000000010000005b98d32c2adc431d11e03cb789d735ed3c776a8d0c2c8954b9", @ANYRES16=r4], 0x2}}, 0x0) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00), 0x0, 0x0) 18:10:46 executing program 2: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000180)) memfd_create(0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000027c0)=""/4096, 0x1000) openat$pfkey(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) 18:10:46 executing program 0: r0 = memfd_create(&(0x7f0000000000)='[wlan1keyring', 0x5) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x992762a249586cde, 0x4d091, r0, 0x0) 18:10:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x200000004, 0x400, 0x0, 0x1}, 0x3c) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 783.182386] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:46 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 18:10:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002030000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:47 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) sendmsg(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x20000044) 18:10:47 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000eeffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400050000000404000001007d60b7030000010000007a0a00fe00000000850000000d000000b70000000000000095000000000000001c000000008000000bb2efe59bb842889c95ef1ba79618689974e65251a831de1911e7ce9427b8fe59cc6bf6d3d8e0d9a32d87a43133851864cf48cbb64f52c8197a991a5ad500080000000000003d04d67748c4d0f7034eb8fc284872b4dcc8c365d99548b4fc3d8640f90c0c6b060f2a67d98f03848c8e3868229bba8647ca373da549ae6c972806fc7de1d287ed25f137d95275fbd100dd1046e9b0febe762635bd20f62a827bc127fd8969a01c5a6deca9cedd561e7d955df8a6cda5047fbead7ee7e76d4b870024b85bfc7f64b4d1b9daa08157971087bc90cb99eded466d80b384ee396f80910953a83327277c3727abd16deb03effda7e880eb5e807e180dd7b2b83ffd5f455dd7ec613366c646f31b60e7197f04403a0382ad7b10ec07409145e165567430f4f536ae00c6195fe39e16205840ef67023fbb44beb642bccdc7ac37607668f62c84c21e94e98c9ed5878bbf24fe0289ddf8b72f0951e12eeac123dba43f7b0310f3f4cb894a4f91d719bba577281a70d5103d9389c391125ab68d37706a13469dd0f52219d5bac16cdc3813fa708f84865c64f9529032f194c55a91e25061fc6224b04cab441a058db44c395aa7286e77877c2b83763c9e69d61b87d0a10bdf0b100e7c3486e8badbff5261e2f191df7105c63d064ca7b46ccf05f2505efe67d5492cb9c7b79ed060f8d059f945b791aeca5b793c46d4c899012d1b0b115706158b1594ad3b0bd12beacec1d318f00eda091f0b2059037a5e62a92e3b5caca2e8344d5233f0db71db870b961813f939ba2f2b28243464b13aaa6fff141112f025818463199033251b87149422f2af859a890bad6102d16db434dce2b6d74fd778aed2a8c061b5cfeb42a207755ae149eb6db24bd7751846084659b96a75ff3fbb59249ffe1c62b3e39c3d9b3b2111b60463419d917e75384b6c5267fb793a4d9401519a5f4fe5938b782231c5b931dd5ba33727c4088694d2c72fb5590cd8183be63d160b5afc6b320f0ae3e4ba3435ae3ea008cd1d458e7c9a15c2a90c1bf237276debec80effbafc06da588bba510a3f72094e91e87aafb3cc0c86120767b0837b68d145d516ffc1ea7d621e566b669134093cb10fbd92217724ef4f9124674775ec3da0f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="b9ff031a000d698cb89e40f02cea", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:10:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) pipe(&(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = dup(r1) read(r2, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0x0, 0x2}, 0x20) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 18:10:49 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:49 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) fchmod(r1, 0x800000100000024) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="31acee388648ccccb574b1441ae19237ca841492d4ee8992b2f366a18ccd5c5b7654568d75b3d56f2a177370f65c3951f61611810fbcd7393d3d304370785761df563b43ef2f5d0c199095e12371af0adf8ebe00000000010000005b98d32c2adc431d11e03cb789d735ed3c776a8d0c2c8954b9", @ANYRES16=r4], 0x2}}, 0x0) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00), 0x0, 0x0) 18:10:49 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x0) 18:10:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 18:10:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002040000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 785.828270] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:10:49 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) io_setup(0x5f, &(0x7f00000000c0)=0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(r0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(0x0, 0x0) gettid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x236}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r2 = getpid() tkill(r2, 0x9) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) 18:10:49 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x600401, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000380)='/dev/vcsu#\x00', 0x3a, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x242000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') sendfile(r1, r2, 0x0, 0xedc0) creat(0x0, 0x0) gettid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}, 0x236}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="b700000001edffffbfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000001d400300000000006504000001ed000067000000170000000c44000000000000630a00fe000000006e40000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a7d26f44198efefb202ee38788ebf01de00b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbba4f94329e646b8ee6de2109fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d99edc3a6138d5f728d236619074d6ebdf098bc908f50ad228a40f9411fe7226a4040b96e37c4f46756d3572e674047e29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e38cc1baddcb7ec6667e699f24e41697ee7ea23c4b29a8b6cc9a1f5a7bb2b1ed81d2cf370ee4a2a00ebeb476ea3caae05f13832292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb4f8f67b8bb8dfff8f4b0e733a63784ccc214d930cbb7e090d63fcd7071b53ac29df656f8ae6d6e18c1eacf5bf870768d5217e9bb7a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce229fd67c7133a9f05954cde298a35ea6d715ba80aee6335eb811a085ca14a7989f9777f600000000000000000000000000000000000000000000000000000000000000000000b854adb4f891ef64e8407c6bdb37f4b0ac6f212879eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a34c5530dd6ee9fffc00000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = getpid() tkill(r3, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) 18:10:49 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) io_setup(0x0, &(0x7f00000000c0)=0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[0x0]) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xedc0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) creat(0x0, 0x0) gettid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x236}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r2 = getpid() tkill(r2, 0x9) pipe(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) 18:10:49 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:50 executing program 0: io_setup(0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xedc0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x236}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) [ 786.571960] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:50 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, 0x0, 0x2}]) socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x3a, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) 18:10:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x100) 18:10:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002050000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:50 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) 18:10:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 18:10:50 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 787.506483] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:51 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000001c0)) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, 0x0) 18:10:51 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x68, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[0x0]) socket$inet6(0xa, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) gettid() perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x236}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = getpid() tkill(r0, 0x9) pipe(0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) 18:10:51 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x100) [ 787.830782] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002060000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:51 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:51 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_out(r0, 0x800080804524, &(0x7f00000000c0)) 18:10:51 executing program 5: 18:10:51 executing program 0: 18:10:51 executing program 5: 18:10:51 executing program 3: 18:10:52 executing program 3: 18:10:52 executing program 5: 18:10:52 executing program 0: 18:10:52 executing program 3: [ 788.726251] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:52 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x100) 18:10:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002070000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:52 executing program 5: 18:10:52 executing program 3: 18:10:52 executing program 0: 18:10:52 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x74, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:52 executing program 3: 18:10:52 executing program 5: 18:10:52 executing program 0: [ 789.103983] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:52 executing program 5: 18:10:52 executing program 0: 18:10:52 executing program 3: 18:10:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) shutdown(r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x100) 18:10:53 executing program 5: 18:10:53 executing program 0: 18:10:53 executing program 3: 18:10:53 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:53 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002080000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:53 executing program 5: 18:10:53 executing program 3: 18:10:53 executing program 0: 18:10:53 executing program 5: 18:10:53 executing program 3: 18:10:53 executing program 0: [ 790.078256] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:54 executing program 2: 18:10:54 executing program 5: 18:10:54 executing program 0: 18:10:54 executing program 3: 18:10:54 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002090000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:54 executing program 0: 18:10:54 executing program 5: 18:10:54 executing program 3: [ 790.759876] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:54 executing program 5: 18:10:54 executing program 2: 18:10:54 executing program 5: 18:10:54 executing program 3: 18:10:54 executing program 0: 18:10:54 executing program 5: 18:10:54 executing program 3: [ 791.341000] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:55 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x19e, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 791.550131] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700020a0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:55 executing program 2: 18:10:55 executing program 0: 18:10:55 executing program 5: 18:10:55 executing program 3: 18:10:55 executing program 5: 18:10:55 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x26a, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:55 executing program 3: 18:10:55 executing program 2: 18:10:55 executing program 0: 18:10:55 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='vfat\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0)='iso9660\x00', &(0x7f0000000400)='./bus\x00', 0x0, 0x8, &(0x7f0000000e00)=[{0x0}, {&(0x7f0000000480)="6537493f8c1fa17570ccc646baba07d10e5e861c78bdc2d6836a75094b2026903343bd1fa5f283f9b0d4cd644694d0d226b845100456193d95e74bf86fc41040f1372d", 0x43, 0x7}, {&(0x7f0000000500)="b2a31a0e40bca3d48b305ed2095300"/25, 0x19}, {&(0x7f0000000540)="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", 0x236}, {&(0x7f0000000b40)="1b3f095dfffdcabc51bb6216f279d8eaf0c0b6f9c0828336c76758e08db1e400c5d5fc0884daa58457cd878896da7c3deab48f2754604ef6bbb02b86fedc64a32fe6afbdc3d542399ef285e135679aa8cac80ab40697502d6afe31f5951de92ddb4728f998f209d65672c28826a40af359581e1fa15f4a05477ef079d2e081d23a5f07fc9d765143de42ad016b4daf85f78cb7bdb581b846703cbffcb37afd2d01c13202667adcb9bcf523115b9e1301679db8", 0xb3, 0xe5}, {&(0x7f0000000c40)="8eca098d821745e7f6c4ca5ae698f4ce65b5b6b4c06b1a7589a9b1509b435cc9a8a3c5ccde179a2421d69868a4eb70c97ef4a0bdb811a5049091173fe6e66ea52740592e3d4d4bc70f3ea11280008794cec2c21db8ff32c09543ecc611c1f294016e946e1a198cea88ac1738dfda793f7944625f477b168a360c9a", 0x7b, 0x401}, {&(0x7f0000000cc0)="fe11c12521a6a7c94f371821a5690eefd3fe71c3badb13f00dda60354948b2df11a525720dd3e22edfb7683f7a6c20e2460b5eba3822a8e44aabd9cf266dfc8484fb3c724e414b1e82d0f2bbefd8449d786fc5fcdf4c2867cf7b440684604d8d2e194f521126988563cc5c26cfe9866ea87bd443446aad75f000597a559cfb998576b6990e8789bc99dc96335dccd94a4a26ecd1175597d4aed2f18845712e2430125af574a899716dc3fab8220df724a43c075fce8136ae5f5f0a87df28ca69ff66dbf938ad8c622f135880ae58c0e63abdda3773874bfb", 0xd8, 0xf6ef}, {&(0x7f0000000dc0)="0cc22d8b921d1665482033eb66fce31a906c6f1db07fc88d957f82a1615c1238674698228c6a9daa6a5fbfa094", 0xffffffffffffff24}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB=',dmode=0x0000000000000000,\x00']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 791.835765] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:55 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000400)={0x8, 0x0, 0x0, 'queue0\x00'}) accept(r0, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000003c0)=0x80) socket$inet(0x10, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000240)={@remote, @multicast2, @broadcast}, 0xc) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f00000001c0)) socket$packet(0x11, 0x0, 0x300) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000800)=""/197, &(0x7f0000000100)=0xc5) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2e}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r4 = dup2(r2, r3) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) [ 792.160646] print_req_error: I/O error, dev loop11, sector 0 [ 792.169220] FAT-fs (loop11): unable to read boot sector [ 792.273373] print_req_error: I/O error, dev loop11, sector 0 [ 792.285566] FAT-fs (loop11): unable to read boot sector 18:10:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700020b0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:56 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r2, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/129, 0x81}], 0x1, 0x0) 18:10:56 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x1a}) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/69}], 0x3, 0x0, 0x159ae6f857735efc, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x11, r2, 0x0, 0x0) 18:10:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x7fff}, 0x16, 0x3) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x3a, &(0x7f00000002c0)=0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4000, 0x800ffffffff}) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) 18:10:56 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2ca, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:10:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x39, 0x0, 0x0, "bf83db59c6be9be1929773a14afade22", "355a0462a65f7402861ea42da3275cd9590c269b924c1371ecf2e809ea32c5f4fa7ba210"}, 0x39, 0x0) setxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)='security.ima\x00', 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000300)=@v2={0x0, 0x0, 0x0, 0x0, 0x3c, "917820e462befaf0d6e1e7602822cc98ef1d6477b20840cfe708e7a973a2cd9da543fcca771170c958f2f107e9a1494774b0b47c9958c4913238ec35"}, 0x45, 0x0) 18:10:56 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x7ffff000) [ 792.657783] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x5, &(0x7f00000002c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') sendfile(r1, r2, 0x0, 0x7ffff000) 18:10:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0400b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000080000000900010072737670000000000c00020008000200e0000001ec7210dacea2d1f27f221f619372305ecd21701f72006b721303de"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004bc0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @can={0x1d, r5}, @phonet={0x23, 0x0, 0x3f}, @ax25={0x3, @null}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='veth0_virt_wifi\x00', 0x5, 0x40}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:10:56 executing program 0: socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000440)}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000400)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={&(0x7f0000000240)=""/48, 0x30}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001480)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001440)='#\x00'}, 0x30) perf_event_open(0x0, 0x0, 0x3, r4, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 18:10:56 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket$inet(0x2, 0x4000000805, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') sendfile(r3, r4, 0x0, 0x7ffff000) keyctl$negate(0xd, 0x0, 0x0, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) socket$inet(0x2, 0x0, 0x5) 18:10:56 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2e0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 793.262411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.394362] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 793.664600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 793.684273] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:57 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700020c0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:10:57 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffffffffffe) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0xff42) close(r1) 18:10:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x2, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x470, 0x0, 0x0, 0x190, 0x0, 0x0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@ipv6={@local, @dev, [], [], 'veth1_to_bond\x00', 'dummy0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, @local}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "3e1f6a4b1736bec9026193a85d6189225791e2dd783d77494e6646b5e20da59e88f20e8eb79e5350efc4a7d14a1c5578beb98a524fb8abce8d341b265a45b0b6"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 18:10:57 executing program 3: r0 = socket$inet(0x2, 0x80005, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)="86", 0xff99}], 0x347}, 0x0) 18:10:57 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2ea, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 794.021952] x_tables: duplicate underflow at hook 2 [ 794.043573] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:10:57 executing program 2: socket$inet(0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf930100, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000f6ff0000140012800a00010076786c616e0000000400028008000a00", @ANYRES32, @ANYBLOB="cfda22fae580aa8f6d84cfa01659eb4aea5916da8c9d05dd2967cef5716f0e28729b29aa4d452ec655b08328927288ee054a0526dfb5e8a8dd70320cfc608b9f140db0daf6d8bc9155381dbcf403e25b8a5d0fb3f90002e90651e6b938456f5f3bae8ee6b3fe2375e3890b5241d6cebbdfd64283ff1db50089d37800004e20964737d5ae2c9dd66501879e646100a589b200a758385dde9ab05fdb3679e718ce3ebdbf735d5cdd179aafe69dde374978db0c51d548ec9225cf07b28a2f0a"], 0x3c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 18:10:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='erspan0\x00', 0xff89) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 18:10:57 executing program 3: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) dup(r0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') pipe(&(0x7f0000000000)) getdents(r2, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) tkill(r1, 0x5) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000200)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:10:58 executing program 3: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) dup(r0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x8000000a, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') pipe(&(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') getdents(r2, &(0x7f0000000000)=""/62, 0xd6147cbb6f273a13) tkill(r1, 0x5) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000200)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 797.171487] IPVS: ftp: loaded support on port[0] = 21 [ 797.339753] chnl_net:caif_netlink_parms(): no params data found [ 797.467883] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.474450] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.482182] device bridge_slave_0 entered promiscuous mode [ 797.489702] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.496259] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.503657] device bridge_slave_1 entered promiscuous mode [ 797.582541] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 797.593390] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 797.643922] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 797.651931] team0: Port device team_slave_0 added [ 797.658126] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 797.666093] team0: Port device team_slave_1 added [ 797.686105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.692482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.718277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.767320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.773604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.798966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.814129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.821774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.830262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.837146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.848292] device bridge_slave_1 left promiscuous mode [ 797.854329] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.906287] device bridge_slave_0 left promiscuous mode [ 797.911836] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.969320] device veth0_macvtap left promiscuous mode [ 797.976400] device veth1_vlan left promiscuous mode [ 797.981475] device veth0_vlan left promiscuous mode [ 800.697173] NOHZ: local_softirq_pending 08 [ 802.769125] bond2 (unregistering): Released all slaves [ 802.785878] bond1 (unregistering): Released all slaves [ 802.888296] device hsr_slave_1 left promiscuous mode [ 802.929933] device hsr_slave_0 left promiscuous mode [ 802.979490] team0 (unregistering): Port device team_slave_1 removed [ 802.992867] team0 (unregistering): Port device team_slave_0 removed [ 803.006794] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 803.029920] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 803.114633] bond0 (unregistering): Released all slaves [ 803.168977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 803.179566] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 803.247845] device hsr_slave_0 entered promiscuous mode [ 803.285742] device hsr_slave_1 entered promiscuous mode [ 803.326755] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 803.334383] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 803.431649] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 803.530554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.541754] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 803.557093] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 803.563987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 803.572685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.584641] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 803.591600] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.603698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 803.611860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 803.621356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 803.630805] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.637257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.649971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 803.657921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 803.672820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 803.681299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 803.697818] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.704226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.721883] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 803.730452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 803.743845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 803.751529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 803.770869] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 803.780679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 803.794322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 803.813879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 803.821912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 803.830453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 803.841939] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 803.873060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 803.883473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 803.899758] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 803.906345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 803.932983] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 803.942348] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 803.949589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 803.957744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 803.972963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.086199] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 804.100856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 804.219090] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 804.228040] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 804.236144] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 804.249195] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 804.256115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 804.264053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 804.277646] device veth0_vlan entered promiscuous mode [ 804.293643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 804.313159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 804.334561] device veth1_vlan entered promiscuous mode [ 804.341351] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 804.354741] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 804.373798] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 804.387858] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 804.395333] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 804.403124] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 804.411654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 804.427488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 804.442387] device veth0_macvtap entered promiscuous mode [ 804.449570] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 804.462009] device veth1_macvtap entered promiscuous mode [ 804.469205] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 804.481511] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 804.496328] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 804.508307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.524872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.535689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.547522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.556724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.566593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.575971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.585875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.595162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.604885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.616684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 804.626601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.637271] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 804.644326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.652418] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 804.660210] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 804.668815] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 804.677106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 804.699177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.709112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.724480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.734499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.750653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.760578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.769943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.779890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.789198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.798974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.808205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 804.818022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.828817] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 804.835930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.843542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 804.852631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:11:08 executing program 0: socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) open(0x0, 0x0, 0x0) 18:11:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00', {0x3}}) 18:11:08 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x14, 0x21, 0x829, 0x0, 0x0, {0x1, 0x1000000}}, 0x14}, 0x1, 0xffffff7f0e000000}, 0x0) 18:11:08 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x1c, r1, 0x31905e13403123b7, 0x0, 0x0, {0x7, 0x0, 0xf000}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x50000}, 0x0) 18:11:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700020d0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x5f, 0x182e, 0x600005f, 0x80ffff, 0x5f, 0x5f, 0x52, 0x48, 0x48, 0x5f, 0x2]}, 0x40) socket(0x0, 0x0, 0x0) [ 805.385998] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:08 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000080)="1c0000001200050fb201a025015785b6", 0x10, 0x0, 0x0, 0x0) 18:11:09 executing program 3: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, r0) 18:11:09 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) 18:11:09 executing program 5: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001080)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5ca2a6f5"}, 0x0, 0x0, @planes=0x0}) 18:11:09 executing program 3: dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x100000003, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xbc21ac56d7503304, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 806.081215] IPv6 header not found [ 806.085866] IPv6 header not found 18:11:09 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000080)={0x0, @vbi}) 18:11:09 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3c3, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:11:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700020e0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x1) 18:11:09 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:10 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 18:11:10 executing program 0: socket(0x22, 0x0, 0x4) 18:11:10 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:10 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) 18:11:10 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$char_usb(r0, &(0x7f00000000c0)="05", 0x1) [ 806.781748] IPv6 header not found [ 806.816983] IPv6 header not found [ 806.946158] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:10 executing program 3: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, r0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:11:10 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "f4f5c22ff91f8c1400ade700"}) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xb66b}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, "8100"}) 18:11:10 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) 18:11:10 executing program 0: socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') creat(0x0, 0x6857b21ff1155d90) 18:11:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700020f0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:10 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000200)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0}}, 0x120) 18:11:10 executing program 5: setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, 0x0, 0x0) 18:11:10 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001bc0), &(0x7f0000001c00)=0xc) 18:11:10 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x550}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1fe, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000440)="3058020af10cb8b56c9606987fe808d672bd136840d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a939b4fd2672693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697863e6ebd80f75cadcb793662562", 0x68, 0xfffffffffffffffd) 18:11:10 executing program 5: socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)) 18:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) [ 807.376763] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) open(0x0, 0x0, 0x0) 18:11:11 executing program 5: getpid() waitid(0x0, 0x0, 0x0, 0x21000002, 0x0) 18:11:11 executing program 0: bpf$MAP_CREATE(0x2, 0x0, 0x0) 18:11:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002100000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:11 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:11 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYPTR64], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 18:11:11 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00'}) 18:11:11 executing program 2: sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x0) 18:11:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:11:11 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="e7"], 0x1) creat(&(0x7f0000000140)='./bus\x00', 0x0) 18:11:11 executing program 5: r0 = syz_open_dev$vivid(&(0x7f00000006c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x7ff, [], 0x0}) [ 808.191086] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400040409", 0xf}], 0x0, 0x0) 18:11:11 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) [ 808.357459] FAT-fs (loop3): bogus number of FAT structure 18:11:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000066c0)={0x0, 0x0, &(0x7f0000006680)={&(0x7f0000006640)={0x14, 0x3, 0x8, 0x201}, 0x14}}, 0x0) 18:11:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) [ 808.400726] FAT-fs (loop3): Can't find a valid FAT filesystem [ 808.523356] FAT-fs (loop3): bogus number of FAT structure [ 808.575263] FAT-fs (loop3): Can't find a valid FAT filesystem 18:11:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002110000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:12 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 18:11:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) shutdown(r0, 0x0) 18:11:12 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x840, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:12 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180)) 18:11:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000092c0)={0x0, 0x0, 0x0}, 0x0) [ 809.030788] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:12 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r0, 0x300, 0x11, 0x0, 0x0) 18:11:12 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) 18:11:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) 18:11:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) 18:11:12 executing program 2: socket(0x25, 0x1, 0x0) 18:11:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002120000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:13 executing program 5: syz_open_dev$admmidi(0x0, 0x0, 0x0) 18:11:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) 18:11:13 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 18:11:13 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x39, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:13 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 809.889360] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:13 executing program 3: ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:13 executing program 5: creat(&(0x7f0000000280)='./file0\x00', 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r0) syz_open_dev$audion(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 18:11:13 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x2bfe00) 18:11:13 executing program 0: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) 18:11:13 executing program 3: socketpair(0x15, 0x0, 0x0, &(0x7f00000001c0)) [ 810.480596] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002130000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:14 executing program 5: read$midi(0xffffffffffffffff, 0x0, 0x0) 18:11:14 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) 18:11:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) 18:11:14 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 18:11:14 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:14 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x0, [], 0x0}) [ 810.678543] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:14 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) 18:11:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 18:11:14 executing program 3: accept$packet(0xffffffffffffffff, 0x0, 0x0) 18:11:14 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002c80)={{{@in6=@empty, @in=@loopback}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, 0xe8) 18:11:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002140000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) 18:11:14 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, 0x0, 0x0) 18:11:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 18:11:14 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000940)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 18:11:14 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:15 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x3c, 0xffffffffffffffff, &(0x7f00000000c0)) [ 811.509131] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(0x0, 0x0, 0x0) 18:11:15 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:11:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90a, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 18:11:15 executing program 2: getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) 18:11:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @dev}, 0xfffffffffffffe0e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 812.080833] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002150000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:15 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x1, 0x1, 0x5}}, 0x14) r3 = openat$cgroup_procs(r2, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x5], 0x6000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x8, 0x6, 0x1, 0x0, 0x3, 0x20808, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x6, 0x285, 0x5, 0x0, 0x98e6, 0x80}, r7, 0x1, 0xffffffffffffffff, 0x0) 18:11:15 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f000000ff00)={'\x00', @ifru_names='ip6erspan0\x00'}) 18:11:15 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) dup3(r2, r0, 0x0) 18:11:15 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x9000000) 18:11:15 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xeba, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:15 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x750083, 0x0) [ 812.407852] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:15 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x22, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x9000000) 18:11:16 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 18:11:16 executing program 5: clock_gettime(0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='2'], 0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:11:16 executing program 2: syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) 18:11:16 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 18:11:16 executing program 2: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000001080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5ca2a6f5"}, 0x0, 0x0, @planes=0x0}) 18:11:16 executing program 5: sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:16 executing program 3: socket(0xec0d9844b9efe8aa, 0x0, 0x0) 18:11:16 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1300, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:16 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002160000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:16 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x6000}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3, 0x20808, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x6, 0x285, 0x0, 0x0, 0x98e6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 18:11:16 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000880)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc8dcc4"}, 0x0, 0x0, @userptr, 0x8f2}) [ 813.166006] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'syz_tun\x00'}) 18:11:16 executing program 2: syz_genetlink_get_family_id$batadv(&(0x7f0000000b00)='batadv\x00') 18:11:16 executing program 5: r0 = syz_open_dev$vivid(&(0x7f00000006c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000780)={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "59838746"}, 0x0, 0x0, @fd}) 18:11:16 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000006c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eb028cc0"}, 0x0, 0x0, @userptr, 0x7f}) 18:11:17 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e90000008060e400"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 18:11:17 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1f00, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:17 executing program 0: socketpair(0x2, 0x2, 0x88, &(0x7f0000000180)) 18:11:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), 0x4) 18:11:17 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00') [ 813.847143] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002170000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:17 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x12, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:17 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r0, &(0x7f0000004240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:11:17 executing program 0: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:17 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:17 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x0, 0x0, &(0x7f0000000000)) 18:11:17 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000016c0)={0x0, 0x0, 0x30}, 0x10) 18:11:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 814.236642] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) 18:11:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000080)) 18:11:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{}, "12b43316abde81ba", "a43589c7d3d892dad827bf3d0a550e97", "97260de6", "bf819e384161db66"}, 0x28) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 814.767705] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:18 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002180000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:18 executing program 5: prlimit64(0x0, 0x0, 0x0, 0x0) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYPTR64], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) 18:11:18 executing program 0: sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 18:11:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:18 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f00, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) [ 815.035922] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:18 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='-'], 0x1) close(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r1) semget$private(0x0, 0x0, 0x0) 18:11:18 executing program 2: clone(0x988e4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:11:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 18:11:18 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x20808, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x285, 0x5, 0x7a6a3f85}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 18:11:18 executing program 0: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0x5460) [ 815.607079] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002190000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:19 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) 18:11:19 executing program 3: socketpair(0x2, 0x2, 0x73, &(0x7f0000000180)) 18:11:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x300, 0x11, 0x0, 0x0) 18:11:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x0, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT]}]}, 0xfffffffffffffec6}}, 0x0) 18:11:19 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:19 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:19 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, r0) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, r0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 18:11:19 executing program 2: socket$inet6_sctp(0xa, 0xb159387720ea502, 0x84) [ 815.997166] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:19 executing program 3: mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 18:11:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x10}]}]}, 0x20}}, 0x0) 18:11:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001380)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) 18:11:20 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700021a0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) 18:11:20 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4008, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:20 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SIOCSIFMTU(r0, 0x5760, 0x0) 18:11:20 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendmmsg(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)="8a", 0x1}], 0x1}}], 0x2, 0x0) 18:11:20 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)='1', 0x1) 18:11:20 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) [ 816.883926] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 18:11:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), 0x8) 18:11:20 executing program 3: open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) 18:11:20 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0xfffeffff}]}) 18:11:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x5], 0x6000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x6, 0x1, 0x0, 0x3, 0x20808, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x6, 0x285, 0x5, 0x0, 0x98e6, 0x80}, r6, 0x1, 0xffffffffffffffff, 0x0) 18:11:21 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700021b0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:21 executing program 0: socketpair(0xa, 0x3, 0x0, &(0x7f0000000000)) 18:11:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}}, 0x0) 18:11:21 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'rose0\x00'}) 18:11:21 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:11:21 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) [ 817.867752] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:21 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) 18:11:21 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) 18:11:21 executing program 3: socketpair(0x2, 0x5, 0x0, &(0x7f0000001740)) 18:11:21 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f00000021c0)=""/4117, &(0x7f0000001140)=0x71a) 18:11:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001440)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:11:22 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)=0xffffffffffffff53) 18:11:22 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4c00, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:22 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x103, 0x0) 18:11:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 18:11:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700021c0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:22 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) 18:11:22 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x9000000) [ 818.699869] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:22 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f00000002c0), 0x4) 18:11:22 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$eventfd(r0, &(0x7f00000001c0), 0xffffff7f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 18:11:22 executing program 5: socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) 18:11:22 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:11:22 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfff, 0x280200) 18:11:22 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x2d, 0xffffffffffffffff, &(0x7f00000000c0)) [ 819.192249] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x4e20, @dev}, 0xfffffffffffffe0e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:11:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700021d0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 18:11:23 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) 18:11:23 executing program 2: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, r0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 18:11:23 executing program 3: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) 18:11:23 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6087, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) 18:11:23 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp1\x00', 0x0, 0x0) 18:11:23 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)) 18:11:23 executing program 0: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x2}]) 18:11:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) [ 820.098436] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:23 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140), 0x10) 18:11:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700021e0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:24 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/loop-control\x00', 0x0, 0x0) 18:11:24 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x2, 0x2) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r1) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x18, r3, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x2}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r4) 18:11:24 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6800, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:24 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') timerfd_gettime(r0, 0x0) 18:11:24 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x82012, r0, 0x0) 18:11:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYPTR64], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) 18:11:24 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') [ 820.577505] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 820.592874] audit: type=1400 audit(1583086284.092:2149): avc: denied { map } for pid=28513 comm="syz-executor.5" path="/dev/fb0" dev="devtmpfs" ino=17232 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:framebuf_device_t:s0 tclass=chr_file permissive=1 18:11:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000001500)) 18:11:24 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r1, 0x6, 0x0, 0x0, &(0x7f0000000000)) 18:11:24 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) 18:11:24 executing program 2: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x0) 18:11:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) 18:11:24 executing program 0: socket$bt_bnep(0x1f, 0x3, 0x4) 18:11:24 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:11:24 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6a02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002210000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:24 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000140)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x2000000000000008}}, 0xa0) 18:11:24 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) 18:11:24 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 821.382438] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:24 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000480)="b0", 0x1) 18:11:25 executing program 2: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 18:11:25 executing program 5: openat$cgroup_type(0xffffffffffffffff, 0x0, 0xe0, 0x0) 18:11:25 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) 18:11:25 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000080)) [ 821.696403] block nbd2: Receive control failed (result -107) [ 821.703426] block nbd2: shutting down sockets [ 821.757720] block nbd2: Receive control failed (result -107) [ 821.779343] block nbd2: shutting down sockets 18:11:25 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6c00, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:25 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:11:25 executing program 2: bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) [ 822.087215] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:25 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002220000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:25 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 18:11:25 executing program 0: socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') pipe(0x0) creat(0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0}, 0x10) dup(0xffffffffffffffff) 18:11:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:11:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) 18:11:25 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7400, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 822.354306] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:11:25 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 822.395389] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 822.422001] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 822.492741] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:11:26 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07bc3376003639405cb4aed12f00000015db5df948da20646010526600e625d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79e65199615607672c59601d4b8a6355ddc55368aa1904f1a25958737a63d7da119b71c4", 0x6a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:11:26 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) [ 822.632203] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:26 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x0, 0x0) 18:11:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr="79f43791c98657920000000000000400"}]}, &(0x7f0000000180)=0x10) 18:11:26 executing program 5: sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 18:11:26 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002230000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 18:11:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f4304d380a5b7277b11e21d2654bb19cf78a6bc6991a08dc66418a588680ad2c464a6c7dbe15bbac955991f53d96b1f79d29c6065e9c370c4b782c108bf4f9e841b4ad33a5ab8986fbd8c18e47f70"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:26 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x7a00, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:26 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, 0x0, 0x22) 18:11:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) [ 823.151388] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:26 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/uhid\x00', 0x0, 0x0) 18:11:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe}, 0x40) 18:11:26 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000ac0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) 18:11:26 executing program 3: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, 0x0, 0x0) 18:11:27 executing program 2: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:11:27 executing program 5: creat(&(0x7f0000000280)='./file0\x00', 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 18:11:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002240000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:27 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 823.849939] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={0x0}, 0x10) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) 18:11:27 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x0) 18:11:27 executing program 2: mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 18:11:27 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000003240)={0x0, 0x0, 0x8}, 0x10) 18:11:27 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x9e01, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:27 executing program 2: socketpair(0x6, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) 18:11:27 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r2 = dup(r1) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) 18:11:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4, 0x8}]}, 0x18}}, 0x0) [ 824.299431] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:27 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002250000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:27 executing program 5: write$midi(0xffffffffffffffff, 0x0, 0x0) 18:11:27 executing program 0: r0 = syz_open_dev$vivid(&(0x7f00000006c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 18:11:28 executing program 2: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x3a1a02, 0x0) 18:11:28 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)='\t', 0x1) r1 = getpgid(0xffffffffffffffff) perf_event_open(0x0, r1, 0xa, r0, 0x13) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 18:11:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000040)='\t', 0x1) 18:11:28 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000c40)='/dev/snd/pcmC#D#p\x00', 0x7, 0x40) 18:11:28 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) connect$bt_rfcomm(r0, 0x0, 0x0) 18:11:28 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xba0e, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:28 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 18:11:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000b00000000000000000000000100180000000000030006000000000002000000e0000001000000000000000002000100000000000000000000000500030005000000000002000000e00000010000000000000000"], 0x58}}, 0x0) [ 825.003860] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) 18:11:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002260000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:28 executing program 3: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:11:28 executing program 5: socketpair(0x2c, 0x3, 0x7, &(0x7f0000000280)) 18:11:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendfile(r2, r0, 0x0, 0x7fffffff) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 18:11:28 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc303, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:28 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='j'], 0x1) 18:11:28 executing program 2: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0, 0x2}]) [ 825.345705] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:28 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x2bfe00) 18:11:29 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x9000000) 18:11:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="d1"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) [ 825.815900] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:29 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) socket(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17) 18:11:29 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002270000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:29 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xca02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:29 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0xa, 0xffffffffffffffff, &(0x7f00000000c0)) [ 826.147220] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:29 executing program 0: r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) 18:11:29 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='auxv\x00') ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 18:11:29 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000006c0)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_QBUF(r0, 0x80805659, 0x0) 18:11:29 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) 18:11:30 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40018040) 18:11:30 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x4}, 0xc) 18:11:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) [ 828.216450] NOHZ: local_softirq_pending 08 18:11:32 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/wireless\x00') 18:11:32 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0xe, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:32 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vhost-vsock\x00', 0x2, 0x0) 18:11:32 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe002, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:32 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:32 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002280000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:32 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x0, &(0x7f000000ff00)={'\x00', @ifru_names='ip6erspan0\x00'}) [ 828.932420] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 18:11:32 executing program 5: pselect6(0x40, &(0x7f0000000780), 0x0, &(0x7f0000000800)={0x7}, &(0x7f0000000880), 0x0) 18:11:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x15, 0xa, 0x101}, 0x14}}, 0x0) 18:11:32 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, 0x0, 0x0) 18:11:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0xffffffffffffffff}}) 18:11:32 executing program 0: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080), 0x4) 18:11:32 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SIOCSIFMTU(r0, 0x5761, 0x0) 18:11:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) [ 829.501231] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:33 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xea02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:33 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r0) creat(&(0x7f0000000280)='./file0\x00', 0x1) 18:11:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002290000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYPTR64], 0x8) accept$alg(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) 18:11:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000240)=[@in]}, &(0x7f0000000180)=0x10) 18:11:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:33 executing program 3: io_setup(0x5f, &(0x7f00000000c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1d03}) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2}]) [ 829.807652] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "12b43316abde81ba", "a43589c7d3d892dad827bf3d0a550e97", "97260de6", "bf819e384161db66"}, 0x28) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) syz_genetlink_get_family_id$nbd(0x0) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ttyprintk\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 18:11:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:11:33 executing program 5: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 18:11:33 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:33 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 18:11:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0x0, 0xd0, 0xd0, 0xd0, 0xd0, 0x190, 0x190, 0x190, 0x190, 0x190, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0x0, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x1da) [ 830.497264] SET target dimension over the limit! [ 830.583036] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700022a0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)) 18:11:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x1c, 0xb, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 18:11:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x7, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 18:11:34 executing program 0: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={0xffffffffffffffff}, 0xc) 18:11:34 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r0, &(0x7f0000001540)=ANY=[@ANYBLOB="e7"], 0x1) 18:11:34 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self/net/pfkey\x00', 0x2, 0x0) 18:11:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = semget$private(0x0, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000380)={{0x1, 0x0, r2}}) 18:11:34 executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) [ 831.072106] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 18:11:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffff}]}}}]}, 0x3c}}, 0x0) recvfrom$l2tp(r0, 0x0, 0x0, 0x20122, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 18:11:34 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0xb, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) [ 831.430160] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 831.443142] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 831.519886] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 831.531130] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 18:11:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700022b0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:35 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:35 executing program 0: creat(0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 18:11:35 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x522c0) 18:11:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 18:11:35 executing program 3: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r0) 18:11:35 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x2b, 0xffffffffffffffff, &(0x7f00000000c0)) 18:11:35 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='B'], 0x1) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) 18:11:35 executing program 3: unlink(0x0) [ 831.696156] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:35 executing program 3: socketpair(0x41, 0x0, 0x0, &(0x7f00000034c0)) 18:11:35 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000b40)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9a4813fd"}, 0x0, 0x0, @fd}) 18:11:35 executing program 0: connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) 18:11:36 executing program 0: socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x0) getpid() openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp1\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) r0 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, 0x0) r1 = open(0x0, 0x141042, 0x0) write$P9_RSTAT(r1, &(0x7f00000002c0)=ANY=[], 0x12e) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./bus\x00', 0x0, 0x8}, 0x10) openat$cgroup_int(r1, &(0x7f0000000480)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000200040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read(0xffffffffffffffff, &(0x7f0000000780)=""/4096, 0x8539) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x7}}, 0x20) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 18:11:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, 0x0, 0x0) 18:11:36 executing program 3: syz_open_dev$usbmon(0x0, 0x0, 0x501002) 18:11:36 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) 18:11:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700022c0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:36 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff0f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 832.570104] block nbd5: NBD_DISCONNECT 18:11:36 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 18:11:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000002f000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 832.596335] block nbd5: Disconnected due to user request. [ 832.603878] block nbd5: shutting down sockets [ 832.618379] block nbd5: shutting down sockets 18:11:36 executing program 5: socketpair(0x11, 0x2, 0x8a, &(0x7f0000000000)) 18:11:36 executing program 3: syz_genetlink_get_family_id$team(0xfffffffffffffffd) 18:11:36 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)) 18:11:36 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="6653070000053c07bc3376003639405cb4aed12f00000015db5df948da20646010526600e625d86800278dcff47d010000805ae64f8f36460234432479aed75d492b41fd983f79", 0x47}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:11:36 executing program 2: syz_open_dev$vivid(&(0x7f00000006c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='c'], 0x1) close(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r1) [ 833.021195] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:36 executing program 5: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) 18:11:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 18:11:36 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x8f, 0x0, 0x95}, 0xe) listen(r0, 0x103) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 18:11:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700022d0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:37 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff7f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:37 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000140)) 18:11:37 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22888, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 833.606457] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:37 executing program 2: sched_setattr(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) 18:11:37 executing program 3: syz_open_dev$rtc(&(0x7f00000012c0)='/dev/rtc#\x00', 0x0, 0x210000) 18:11:37 executing program 3: unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) 18:11:39 executing program 0: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040), 0x10) 18:11:39 executing program 2: open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) 18:11:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:11:39 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffe, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:39 executing program 5: mkdirat(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sched_setattr(r0, 0x0, 0x0) pipe(&(0x7f0000000180)) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x100000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) gettid() write$binfmt_script(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 18:11:39 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700022e0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 836.233307] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:39 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x0, @raw_data="9086533607a705c29525fe65754a797db154a53a5d36e89342542deabc22167f80252f8395a4e060d7cd1af56bbc3ce9fe84f058e77baa0621464765f94ec17d54d839662c56c340273eead5efd022ba0893fca51cc6bcbe232ae594a622a35345ef1e33ce4cf862fb91233077c38e79df3c6a15eb39619f46a665aa2b0d8418e7af652ee51a266253aedbfdc5339274213d713f958285f7b16b4425cbeec5c0277ac9abb153c353991dc6fd5479152735772b581de4942665f521283675ee1a6707bb45a7cd685e"}) 18:11:39 executing program 5: socketpair(0x21, 0x0, 0x2, &(0x7f00000000c0)) 18:11:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001380)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:11:39 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000080)={'syzkaller0\x00', @ifru_names='bridge_slave_1\x00'}) 18:11:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x0) 18:11:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x90a, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:40 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000b80)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000bc0)={0x0, 0x0, 0x0, {0x6, @sdr}}) 18:11:40 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) [ 836.902032] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:40 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330fa, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:40 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) [ 837.182148] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700022f0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:40 executing program 5: recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:11:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0x0, 0xd0, 0x1a0, 0x0, 0xd0, 0x298, 0x298, 0x298, 0x298, 0x298, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast2}, [], [], 'rose0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@mcast2, @dev, [], [], 'hsr0\x00', 'sit0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28, 'dscp\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 18:11:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:11:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1524}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f4304d380a5b7277b11e21d2654bb19cf78a6bc6991a08dc66418a588680ad2c464a6c7dbe15bbac955991f53d96b1f79d29c6065e9c370c4b782c108bf4f9e841b4ad33a5ab8986fbd8c18e47f70"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:40 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330fb, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 837.465027] x_tables: duplicate underflow at hook 2 18:11:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 18:11:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 18:11:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) 18:11:41 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 837.849326] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 18:11:41 executing program 3: creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_open_dev$vivid(0x0, 0x2, 0x2) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r1) 18:11:41 executing program 0: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) 18:11:41 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330fc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002300000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:41 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 838.277048] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:42 executing program 5: mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:11:42 executing program 0: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x550}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1fe, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) getsockopt(0xffffffffffffffff, 0x114, 0x0, 0x0, 0x0) 18:11:42 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 18:11:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 18:11:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x53, 0x0, 0x0, 0x0, 0xfffffffffffffde4}}], 0x8000000000001f0, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xea) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = memfd_create(0x0, 0x0) dup2(0xffffffffffffffff, r3) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(r4, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 18:11:42 executing program 3: ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, 0x0) 18:11:42 executing program 5: socketpair(0x15, 0x0, 0x0, &(0x7f0000000a40)) 18:11:42 executing program 2: read$usbmon(0xffffffffffffffff, 0x0, 0x0) 18:11:42 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00281293bd5d74dafc20380003000000c763bf0c0079be7a2ce3c134108fe74950f9b13a5ea0cee7257825501bb77bf723be80699ab51e67f4fee76bb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002c7cd466eb935812a2d3e432b953a500000000000086314219123c233beca448dd9f82c124c794f7091e2b1023e629b0ad0ff74ed7d8102e0cbe3166973841c157945f577ea3aeba088227b92e995e037bde20c8ceb6039d7a01ae3efc82e30d345cbc9a14e11dd91ce716d1d19e059363ca36ea2e099cd3740210f66f32e73b897cca2b1550053d9e9edebbfcaa5e49b6d53b8a4cc76efbeb16e3e4fd67"], 0x124) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) [ 839.024668] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:42 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330fd, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 839.276891] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:42 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002310000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r0, 0x0, 0x0) 18:11:42 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00281293bd5d74dafc20380003000000c763bf0c0079be7a2ce3c134108fe74950f9b13a5ea0cee7257825501bb77bf723be80699ab51e67f4fee76bb7fad4231d844bc3c08f7352c53960ede02054e2418d890a676ec576e6002c7cd466eb935812a2d3e432b953a500000000000086314219123c233beca448dd9f82c124c794f7091e2b1023e629b0ad0ff74ed7d8102e0cbe3166973841c157945f577ea3aeba088227b92e995e037bde20c8ceb6039d7a01ae3efc82e30d345cbc9a14e11dd91ce716d1d19e059363ca36ea2e099cd3740210f66f32e73b897cca2b1550053d9e9edebbfcaa5e49b6d53b8a4cc76efbeb16e3e4fd67"], 0x124) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 18:11:43 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000d80)={'batadv_slave_0\x00', @ifru_map}) [ 839.480710] audit: type=1800 audit(1583086302.992:2150): pid=29327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="sda1" ino=17777 res=0 18:11:43 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330fe, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) 18:11:43 executing program 3: socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) 18:11:43 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000001040)='/dev/vcs#\x00', 0xfff, 0x0) read$usbmon(r0, &(0x7f0000001080)=""/243, 0xf3) 18:11:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:43 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x10, 0x800) sendto$llc(r0, &(0x7f0000000380)="08c848e78470d7688a154b7eb27cdeecdba3b05ecf1baf6d2d9bb3d7", 0x1c, 0xc0, &(0x7f00000000c0)={0x1a, 0x10f, 0x5, 0x8, 0x2, 0x7f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 18:11:43 executing program 3: socket$kcm(0x2b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getpid() pipe(0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) [ 839.973082] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:43 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002320000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:43 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330ff, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:43 executing program 5: io_setup(0x874f, &(0x7f0000000000)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) 18:11:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}]}]}, 0x20}}, 0x0) 18:11:43 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000800)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000b40)={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "9a4813fd"}, 0x0, 0x0, @fd}) 18:11:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000008000921050000000000000000000000b8e736c05e78e52017be48651e6b796371dc1bccbb1f8f269ee8e05d9db523726d39d2efa61de9231a204db63206e7b220c72cd88353efb0dbb579cfb6bfdbca3fb695"], 0x1c}}, 0x0) 18:11:44 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) [ 840.523184] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) 18:11:44 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) 18:11:44 executing program 2: r0 = creat(0x0, 0x1) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r2) write$binfmt_script(r1, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x1) 18:11:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000840)) pselect6(0x40, &(0x7f0000000780), &(0x7f00000007c0)={0x8}, &(0x7f0000000800)={0x7}, 0x0, 0x0) [ 841.180303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:11:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002330000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:44 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) symlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f0000000340)='./file0\x00') 18:11:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc72e2420060000000000011424f30f090f013a360f06c4c18d72d68366baa100ed", 0xffffffffffffff96}], 0xb3e, 0x0, 0x0, 0xfffffe41) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) 18:11:44 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33107, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="287cf6ea8bb8bc712a0000000806010200000000000000000000000005000100070000000900020073797a3200008000"], 0x28}}, 0x0) 18:11:44 executing program 5: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xc0481273) [ 841.336412] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 841.342897] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING 18:11:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_map}) 18:11:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) 18:11:45 executing program 3: syz_open_dev$vivid(&(0x7f00000006c0)='/dev/video#\x00', 0x0, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r0) 18:11:45 executing program 0: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000001080)=ANY=[@ANYBLOB='#'], 0x1) close(r1) 18:11:45 executing program 3: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f00000000c0)) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:11:45 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002340000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:11:45 executing program 0: syz_read_part_table(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="1e", 0x1, 0x3}]) 18:11:45 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33108, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{}, "12b43316abde81ba", "a43589c7d3d892dad827bf3d0a550e97", "97260de6", "bf819e384161db66"}, 0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:11:45 executing program 5: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SIOCSIFMTU(r0, 0x5460, 0x0) 18:11:45 executing program 5: bind$packet(0xffffffffffffffff, 0x0, 0x0) 18:11:45 executing program 0: 18:11:45 executing program 2: 18:11:45 executing program 3: 18:11:46 executing program 5: 18:11:46 executing program 0: [ 842.472260] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002350000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:46 executing program 2: 18:11:46 executing program 3: 18:11:46 executing program 5: 18:11:46 executing program 0: 18:11:46 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33109, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:46 executing program 0: 18:11:46 executing program 3: 18:11:46 executing program 2: 18:11:46 executing program 5: [ 842.996836] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:46 executing program 2: 18:11:46 executing program 3: [ 843.501529] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002360000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:47 executing program 5: 18:11:47 executing program 3: 18:11:47 executing program 2: 18:11:47 executing program 0: 18:11:47 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3310a, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:47 executing program 3: 18:11:47 executing program 5: 18:11:47 executing program 2: 18:11:47 executing program 0: [ 843.774181] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:47 executing program 3: 18:11:47 executing program 5: 18:11:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002370000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:47 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3310b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:47 executing program 0: 18:11:47 executing program 2: 18:11:47 executing program 5: 18:11:47 executing program 3: 18:11:48 executing program 0: 18:11:48 executing program 5: 18:11:48 executing program 2: [ 844.548232] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:48 executing program 3: 18:11:48 executing program 0: 18:11:48 executing program 2: [ 845.025598] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:48 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700023a0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:48 executing program 5: 18:11:48 executing program 0: 18:11:48 executing program 3: 18:11:48 executing program 2: 18:11:48 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3310c, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:48 executing program 0: 18:11:48 executing program 5: 18:11:48 executing program 3: [ 845.314639] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:48 executing program 2: 18:11:48 executing program 5: 18:11:49 executing program 3: 18:11:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002480000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:49 executing program 0: 18:11:49 executing program 5: 18:11:49 executing program 2: 18:11:49 executing program 3: 18:11:49 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3310d, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:49 executing program 5: 18:11:49 executing program 3: 18:11:49 executing program 0: 18:11:49 executing program 2: [ 845.962325] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:49 executing program 0: 18:11:49 executing program 5: 18:11:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700024c0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:50 executing program 2: 18:11:50 executing program 3: 18:11:50 executing program 0: 18:11:50 executing program 5: 18:11:50 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3310e, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:50 executing program 3: 18:11:50 executing program 5: 18:11:50 executing program 2: 18:11:50 executing program 0: [ 846.796925] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:50 executing program 3: 18:11:50 executing program 2: 18:11:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002600000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:50 executing program 5: 18:11:50 executing program 0: 18:11:50 executing program 3: 18:11:50 executing program 2: 18:11:50 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3310f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:51 executing program 3: 18:11:51 executing program 5: 18:11:51 executing program 2: 18:11:51 executing program 0: [ 847.479831] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:51 executing program 5: 18:11:51 executing program 3: 18:11:51 executing program 0: 18:11:51 executing program 2: 18:11:51 executing program 5: 18:11:51 executing program 3: 18:11:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002680000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:51 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33110, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:51 executing program 5: 18:11:51 executing program 0: 18:11:51 executing program 2: [ 848.222361] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:51 executing program 3: 18:11:51 executing program 3: 18:11:51 executing program 0: 18:11:52 executing program 2: 18:11:52 executing program 3: 18:11:52 executing program 5: 18:11:52 executing program 2: [ 848.859643] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:52 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700026c0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:52 executing program 0: 18:11:52 executing program 3: 18:11:52 executing program 5: 18:11:52 executing program 2: 18:11:52 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33111, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:52 executing program 3: 18:11:52 executing program 0: 18:11:52 executing program 2: 18:11:52 executing program 5: [ 849.188881] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:52 executing program 3: 18:11:52 executing program 0: 18:11:53 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002740000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:53 executing program 2: 18:11:53 executing program 5: 18:11:53 executing program 3: 18:11:53 executing program 0: 18:11:53 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33112, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:53 executing program 2: 18:11:53 executing program 5: 18:11:53 executing program 0: [ 849.856298] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:53 executing program 3: 18:11:53 executing program 2: 18:11:53 executing program 5: 18:11:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700027a0000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:54 executing program 0: 18:11:54 executing program 3: 18:11:54 executing program 2: 18:11:54 executing program 5: 18:11:54 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33113, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:54 executing program 5: 18:11:54 executing program 3: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:11:54 executing program 2: 18:11:54 executing program 0: [ 850.605863] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:54 executing program 2: 18:11:54 executing program 0: 18:11:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002f00000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:54 executing program 3: 18:11:54 executing program 5: 18:11:54 executing program 0: 18:11:54 executing program 2: 18:11:54 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33114, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:54 executing program 0: 18:11:54 executing program 3: 18:11:54 executing program 2: 18:11:54 executing program 5: [ 851.348828] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:55 executing program 2: 18:11:55 executing program 3: 18:11:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b001700020c0200740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:55 executing program 0: 18:11:55 executing program 5: 18:11:55 executing program 2: 18:11:55 executing program 3: 18:11:55 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33115, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:55 executing program 5: 18:11:55 executing program 0: 18:11:55 executing program 2: [ 852.044646] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:55 executing program 3: 18:11:55 executing program 5: 18:11:55 executing program 2: 18:11:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000300740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:56 executing program 3: 18:11:56 executing program 0: 18:11:56 executing program 5: 18:11:56 executing program 2: 18:11:56 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33116, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:56 executing program 0: 18:11:56 executing program 3: 18:11:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="3376003639405cb45ba52f0000000000ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05b119f9fc54301eae7f3b83f0692e664ebf60e6faa53367f05f4ad61421349f2f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa9241eafb943d84a486f090064232fedfe92175aaa1c4ecc7afeb72e0d050feace34b5", 0xbf}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 18:11:56 executing program 2: [ 852.829358] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:56 executing program 5: 18:11:56 executing program 0: 18:11:57 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000500740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:57 executing program 3: 18:11:57 executing program 2: 18:11:57 executing program 0: 18:11:57 executing program 5: 18:11:57 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33117, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:57 executing program 3: 18:11:57 executing program 0: 18:11:57 executing program 5: 18:11:57 executing program 2: [ 853.584589] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:57 executing program 3: 18:11:57 executing program 2: 18:11:57 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000600740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:57 executing program 5: 18:11:57 executing program 0: 18:11:57 executing program 3: 18:11:57 executing program 2: 18:11:57 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33118, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:57 executing program 3: 18:11:57 executing program 5: 18:11:57 executing program 0: 18:11:57 executing program 2: [ 854.326431] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:57 executing program 3: 18:11:58 executing program 0: [ 854.783613] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:58 executing program 5: 18:11:58 executing program 2: 18:11:58 executing program 3: 18:11:58 executing program 0: 18:11:58 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000700740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:58 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33119, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:58 executing program 3: 18:11:58 executing program 2: 18:11:58 executing program 5: 18:11:58 executing program 0: [ 855.034914] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:11:58 executing program 2: 18:11:58 executing program 5: 18:11:58 executing program 0: 18:11:58 executing program 3: 18:11:58 executing program 2: 18:11:58 executing program 5: 18:11:59 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000900740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:11:59 executing program 0: 18:11:59 executing program 3: 18:11:59 executing program 2: 18:11:59 executing program 5: 18:11:59 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311a, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:11:59 executing program 0: 18:11:59 executing program 2: 18:11:59 executing program 5: 18:11:59 executing program 3: 18:11:59 executing program 0: 18:11:59 executing program 2: [ 856.227332] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000a00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:00 executing program 3: 18:12:00 executing program 5: 18:12:00 executing program 2: 18:12:00 executing program 0: 18:12:00 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:00 executing program 2: 18:12:00 executing program 5: 18:12:00 executing program 3: 18:12:00 executing program 0: [ 856.539587] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:00 executing program 2: 18:12:00 executing program 0: 18:12:00 executing program 5: 18:12:00 executing program 3: 18:12:00 executing program 2: 18:12:00 executing program 0: 18:12:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000b00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:00 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311c, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:00 executing program 0: 18:12:00 executing program 5: 18:12:00 executing program 3: 18:12:00 executing program 2: [ 857.268771] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:00 executing program 0: 18:12:00 executing program 3: 18:12:01 executing program 2: 18:12:01 executing program 5: 18:12:01 executing program 0: 18:12:01 executing program 3: 18:12:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000c00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:01 executing program 2: 18:12:01 executing program 5: 18:12:01 executing program 0: 18:12:01 executing program 3: 18:12:01 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311d, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:01 executing program 0: 18:12:01 executing program 3: 18:12:01 executing program 5: 18:12:01 executing program 2: [ 858.169376] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:01 executing program 3: 18:12:01 executing program 5: 18:12:02 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002020c00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:02 executing program 0: 18:12:02 executing program 2: 18:12:02 executing program 3: 18:12:02 executing program 5: 18:12:02 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311e, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:02 executing program 2: 18:12:02 executing program 0: 18:12:02 executing program 5: [ 858.904437] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:02 executing program 3: 18:12:02 executing program 2: 18:12:02 executing program 5: 18:12:03 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000d00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:03 executing program 3: 18:12:03 executing program 0: 18:12:03 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:03 executing program 2: 18:12:03 executing program 5: 18:12:03 executing program 2: 18:12:03 executing program 3: 18:12:03 executing program 0: [ 859.686202] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:03 executing program 5: 18:12:03 executing program 3: 18:12:03 executing program 0: 18:12:03 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000e00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:03 executing program 2: 18:12:03 executing program 5: 18:12:03 executing program 0: 18:12:03 executing program 3: 18:12:03 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33120, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:03 executing program 3: 18:12:03 executing program 5: 18:12:03 executing program 2: 18:12:04 executing program 0: [ 860.442273] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:04 executing program 5: 18:12:04 executing program 3: 18:12:04 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002ba0e00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:04 executing program 2: 18:12:04 executing program 0: 18:12:04 executing program 5: 18:12:04 executing program 3: 18:12:04 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33121, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:04 executing program 2: 18:12:04 executing program 3: 18:12:04 executing program 0: [ 861.133651] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:04 executing program 5: 18:12:04 executing program 2: 18:12:04 executing program 0: [ 861.648087] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:05 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000f00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:05 executing program 3: 18:12:05 executing program 5: 18:12:05 executing program 2: 18:12:05 executing program 0: 18:12:05 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33122, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:05 executing program 0: 18:12:05 executing program 3: 18:12:05 executing program 5: 18:12:05 executing program 2: [ 861.934191] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:05 executing program 3: 18:12:05 executing program 2: 18:12:06 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001100740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:06 executing program 0: 18:12:06 executing program 5: 18:12:06 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33123, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:06 executing program 2: 18:12:06 executing program 3: 18:12:06 executing program 0: 18:12:06 executing program 5: 18:12:06 executing program 2: 18:12:06 executing program 3: [ 862.756133] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:06 executing program 5: 18:12:06 executing program 3: 18:12:06 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001200740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:06 executing program 0: 18:12:06 executing program 2: 18:12:06 executing program 3: 18:12:06 executing program 5: 18:12:06 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33124, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:07 executing program 3: 18:12:07 executing program 5: [ 863.533650] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:07 executing program 2: 18:12:07 executing program 0: 18:12:07 executing program 3: 18:12:07 executing program 5: 18:12:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001300740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:07 executing program 2: 18:12:07 executing program 0: 18:12:07 executing program 3: 18:12:07 executing program 5: 18:12:07 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33125, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:07 executing program 2: 18:12:07 executing program 0: [ 864.354745] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:07 executing program 3: 18:12:07 executing program 5: 18:12:08 executing program 0: 18:12:08 executing program 2: 18:12:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001400740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:08 executing program 5: 18:12:08 executing program 3: 18:12:08 executing program 2: 18:12:08 executing program 0: 18:12:08 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33126, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:08 executing program 3: 18:12:08 executing program 2: 18:12:08 executing program 0: [ 865.064025] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:08 executing program 5: 18:12:08 executing program 3: 18:12:08 executing program 2: 18:12:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001500740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:09 executing program 5: 18:12:09 executing program 0: 18:12:09 executing program 3: 18:12:09 executing program 2: 18:12:09 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33127, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:09 executing program 3: 18:12:09 executing program 5: 18:12:09 executing program 0: [ 865.826259] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:09 executing program 2: 18:12:09 executing program 0: 18:12:09 executing program 5: 18:12:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001600740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:10 executing program 3: 18:12:10 executing program 5: 18:12:10 executing program 2: 18:12:10 executing program 0: 18:12:10 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33128, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:10 executing program 0: 18:12:10 executing program 2: 18:12:10 executing program 5: 18:12:10 executing program 3: [ 866.600052] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:10 executing program 5: 18:12:10 executing program 2: 18:12:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001700740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:10 executing program 3: 18:12:10 executing program 0: 18:12:10 executing program 5: 18:12:10 executing program 2: 18:12:10 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33129, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:10 executing program 2: 18:12:10 executing program 5: 18:12:10 executing program 0: 18:12:10 executing program 3: [ 867.329427] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:11 executing program 5: 18:12:11 executing program 3: 18:12:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001800740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:11 executing program 0: 18:12:11 executing program 2: 18:12:11 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3312a, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:11 executing program 5: 18:12:11 executing program 3: 18:12:11 executing program 0: 18:12:11 executing program 2: 18:12:11 executing program 5: 18:12:11 executing program 3: 18:12:11 executing program 2: 18:12:11 executing program 0: [ 868.202052] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 868.432314] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001900740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:12 executing program 3: 18:12:12 executing program 5: 18:12:12 executing program 2: 18:12:12 executing program 0: 18:12:12 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3312b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:12 executing program 3: 18:12:12 executing program 2: 18:12:12 executing program 5: 18:12:12 executing program 0: [ 868.649553] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:12 executing program 3: 18:12:12 executing program 2: 18:12:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001a00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:12 executing program 0: 18:12:12 executing program 5: 18:12:12 executing program 2: 18:12:12 executing program 3: 18:12:12 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3312c, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:12 executing program 3: 18:12:12 executing program 5: 18:12:13 executing program 2: [ 869.434260] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:13 executing program 0: 18:12:13 executing program 5: 18:12:13 executing program 2: [ 869.970404] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001b00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:13 executing program 3: 18:12:13 executing program 0: 18:12:13 executing program 2: 18:12:13 executing program 5: 18:12:13 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3312d, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:13 executing program 0: 18:12:13 executing program 3: 18:12:13 executing program 2: 18:12:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) read$usbmon(r0, 0x0, 0x0) [ 870.302077] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:13 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000580)=""/248) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:12:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000002180)=""/4093, 0xffd}], 0x1, 0x0) 18:12:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001c00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:12:14 executing program 2: socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7a, &(0x7f0000000080)={r3, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r3, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:14 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3312e, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 871.169906] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 871.183346] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 873.011667] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:12:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:18 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3312f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 875.312581] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:18 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001d00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:19 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000640)=ANY=[], 0x0, &(0x7f00000002c0)='autofs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0), 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 18:12:19 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33130, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 876.173912] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:20 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33131, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 876.931778] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280), 0x40) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000140)={0x7b}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000000100)=0x54) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xd34, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:12:22 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:22 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33132, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001e00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 878.739268] kvm_hv_set_msr: 20 callbacks suppressed [ 878.739283] kvm [30653]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000056 data 0x20 [ 878.803981] kvm [30653]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000016 data 0x20 [ 878.822370] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 878.841501] kvm [30653]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000015 data 0x20 [ 878.882303] kvm [30653]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000055 data 0x20 18:12:22 executing program 2: 18:12:22 executing program 2: 18:12:22 executing program 0: 18:12:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:22 executing program 0: 18:12:22 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33133, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:22 executing program 2: 18:12:22 executing program 0: 18:12:22 executing program 2: [ 879.559879] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:25 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:25 executing program 0: 18:12:25 executing program 2: 18:12:25 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002001f00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:25 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33134, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:25 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:25 executing program 0: [ 881.743370] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:25 executing program 2: 18:12:25 executing program 2: 18:12:25 executing program 2: 18:12:25 executing program 0: 18:12:25 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000005600)=[{{&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x80, 0x0}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) 18:12:28 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:28 executing program 0: syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pipe(&(0x7f0000000200)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(&(0x7f0000000000)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000240)="0f34", 0x2}], 0x10000000000002d1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}, {r1}], 0x3, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/65, 0xc}], 0x2, 0x0, 0xfffffffffffffff5, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:28 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33135, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x80000000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x470, 0x0, 0x0, 0x190, 0x0, 0x0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x4, 0x0, {[{{@ipv6={@local, @dev, [], [], 'veth1_to_bond\x00', 'dummy0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, @local}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "3e1f6a4b1736bec9026193a85d6189225791e2dd783d77494e6646b5e20da59e88f20e8eb79e5350efc4a7d14a1c5578beb98a524fb8abce8d341b265a45b0b6"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 18:12:28 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:12:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:28 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33130, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 884.823514] x_tables: duplicate underflow at hook 2 [ 884.826890] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:28 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33125, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 885.628086] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 18:12:29 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 885.786102] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 18:12:29 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33136, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 885.955689] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:29 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33130, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:29 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33125, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 886.165950] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 886.348973] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 18:12:31 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:31 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33137, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:31 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002100740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:31 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33123, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:31 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 887.877669] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:31 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) [ 888.185788] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 888.691481] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 18:12:32 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3311f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:32 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33138, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:32 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33123, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 888.952174] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 889.161847] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 889.385742] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 18:12:33 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33139, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:33 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33137, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:33 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330fa, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:33 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002200740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 889.618974] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:33 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 889.759840] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 889.870226] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 18:12:33 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313a, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 890.466915] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:34 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff7f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:34 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002300740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:34 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x330fa, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:34 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:34 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:34 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xff7f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:35 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313c, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:35 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:35 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:35 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002200740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:36 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002400740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:36 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313d, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 893.064406] validate_nla: 6 callbacks suppressed [ 893.064568] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:37 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:37 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:37 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xea02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:37 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:37 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313e, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:37 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002500740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 894.190314] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 894.325606] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 894.575562] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:38 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:38 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xea02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:38 executing program 2: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3313b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 895.348943] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 895.622047] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 896.165358] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 18:12:39 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xea02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 896.348220] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 18:12:40 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:40 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33140, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002600740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:40 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6a02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 897.323208] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 898.273733] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:41 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6a02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:41 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33141, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002700740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 898.515675] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 898.682057] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 898.694180] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 898.701222] CPU: 0 PID: 30987 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 898.709129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.718592] Call Trace: [ 898.721202] dump_stack+0x188/0x20d [ 898.724847] dump_header+0x159/0xa5e [ 898.728588] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 898.733723] ? ___ratelimit+0x59/0x573 [ 898.737644] oom_kill_process.cold+0x10/0x6dc [ 898.742162] ? task_will_free_mem+0x134/0x6d0 [ 898.746684] out_of_memory+0x349/0x1250 [ 898.750684] ? oom_killer_disable+0x270/0x270 [ 898.755207] mem_cgroup_out_of_memory+0x1c7/0x240 [ 898.760197] ? memcg_event_wake+0x210/0x210 [ 898.764550] ? do_raw_spin_unlock+0x171/0x260 [ 898.769066] try_charge+0xe22/0x1300 [ 898.772927] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 898.777792] ? get_mem_cgroup_from_mm+0x179/0x4f0 18:12:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 898.782658] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 898.788740] ? mark_held_locks+0xf0/0xf0 [ 898.792836] mem_cgroup_try_charge+0x249/0x5c0 [ 898.797465] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 898.802417] __handle_mm_fault+0x1cfb/0x3b60 [ 898.806849] ? copy_page_range+0x1e70/0x1e70 [ 898.811275] ? count_memcg_event_mm+0x279/0x4c0 [ 898.816091] handle_mm_fault+0x1a5/0x670 [ 898.820183] __get_user_pages+0x599/0x1650 [ 898.824445] ? follow_page_mask+0x1a60/0x1a60 [ 898.828964] ? lock_acquire+0x170/0x400 [ 898.832958] populate_vma_page_range+0x1fd/0x290 [ 898.837734] __mm_populate+0x1e8/0x350 [ 898.841646] ? populate_vma_page_range+0x290/0x290 [ 898.846808] ? do_mlock+0x6b0/0x6b0 [ 898.850457] __x64_sys_mlockall+0x340/0x500 [ 898.854991] do_syscall_64+0xf9/0x620 [ 898.858816] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 898.864009] RIP: 0033:0x45c479 [ 898.867380] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 898.886408] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 898.894137] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 898.901409] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 898.908690] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 898.916062] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 898.923334] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 898.934731] Task in /syz5 killed as a result of limit of /syz5 [ 898.941315] memory: usage 307096kB, limit 307200kB, failcnt 62 [ 898.947339] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 898.954235] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 898.960443] Memory cgroup stats for /syz5: cache:180KB rss:292368KB rss_huge:34816KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:238076KB active_anon:38316KB inactive_file:60KB active_file:8KB unevictable:16136KB [ 898.982370] Memory cgroup out of memory: Kill process 30693 (syz-executor.5) score 1163 or sacrifice child [ 898.994081] Killed process 30693 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 899.122498] oom_reaper: reaped process 30693 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 899.223564] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 899.868546] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 899.880421] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 899.885905] CPU: 0 PID: 31004 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 899.893792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.903152] Call Trace: [ 899.905752] dump_stack+0x188/0x20d [ 899.909407] dump_header+0x159/0xa5e [ 899.913148] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 899.918264] ? ___ratelimit+0x59/0x573 [ 899.922177] oom_kill_process.cold+0x10/0x6dc [ 899.926691] ? task_will_free_mem+0x134/0x6d0 [ 899.931203] out_of_memory+0x349/0x1250 [ 899.935190] ? oom_killer_disable+0x270/0x270 [ 899.939704] mem_cgroup_out_of_memory+0x1c7/0x240 [ 899.944565] ? memcg_event_wake+0x210/0x210 [ 899.948913] ? do_raw_spin_unlock+0x171/0x260 [ 899.953415] try_charge+0xe22/0x1300 [ 899.957144] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 899.962002] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 899.966864] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 899.972931] ? mark_held_locks+0xf0/0xf0 [ 899.977011] mem_cgroup_try_charge+0x249/0x5c0 [ 899.981604] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 899.987030] __handle_mm_fault+0x1cfb/0x3b60 [ 899.991455] ? copy_page_range+0x1e70/0x1e70 [ 899.995877] ? count_memcg_event_mm+0x279/0x4c0 [ 900.000585] handle_mm_fault+0x1a5/0x670 [ 900.004670] __get_user_pages+0x599/0x1650 [ 900.008925] ? follow_page_mask+0x1a60/0x1a60 [ 900.013437] ? lock_acquire+0x170/0x400 [ 900.017428] populate_vma_page_range+0x1fd/0x290 [ 900.022210] __mm_populate+0x1e8/0x350 [ 900.026128] ? populate_vma_page_range+0x290/0x290 [ 900.031075] ? do_mlock+0x6b0/0x6b0 [ 900.034727] __x64_sys_mlockall+0x340/0x500 [ 900.039172] do_syscall_64+0xf9/0x620 [ 900.042994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.048188] RIP: 0033:0x45c479 [ 900.051384] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 900.070294] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 900.078015] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 900.085290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 900.092562] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 900.099841] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 900.107123] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 900.114950] Task in /syz5 killed as a result of limit of /syz5 [ 900.120990] memory: usage 307200kB, limit 307200kB, failcnt 128 [ 900.127090] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.133855] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.140151] Memory cgroup stats for /syz5: cache:180KB rss:292572KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:240124KB active_anon:38316KB inactive_file:4KB active_file:8KB unevictable:14176KB [ 900.161833] Memory cgroup out of memory: Kill process 30756 (syz-executor.5) score 1163 or sacrifice child [ 900.171715] Killed process 30756 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 900.645818] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 900.656137] oom_reaper: reaped process 30756 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 900.657206] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 900.674561] CPU: 0 PID: 31004 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 900.682575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.691927] Call Trace: [ 900.694522] dump_stack+0x188/0x20d [ 900.698159] dump_header+0x159/0xa5e [ 900.701878] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 900.707088] ? ___ratelimit+0x59/0x573 [ 900.710978] oom_kill_process.cold+0x10/0x6dc [ 900.720273] ? task_will_free_mem+0x134/0x6d0 [ 900.724773] out_of_memory+0x349/0x1250 [ 900.728745] ? oom_killer_disable+0x270/0x270 [ 900.733258] mem_cgroup_out_of_memory+0x1c7/0x240 [ 900.738185] ? memcg_event_wake+0x210/0x210 [ 900.745549] ? do_raw_spin_unlock+0x171/0x260 [ 900.750051] try_charge+0xe22/0x1300 [ 900.753768] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 900.758634] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 900.763484] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 900.769545] ? mark_held_locks+0xf0/0xf0 [ 900.773614] mem_cgroup_try_charge+0x249/0x5c0 [ 900.778205] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 900.783147] __handle_mm_fault+0x1cfb/0x3b60 [ 900.787562] ? copy_page_range+0x1e70/0x1e70 [ 900.792155] ? count_memcg_event_mm+0x279/0x4c0 [ 900.796833] handle_mm_fault+0x1a5/0x670 [ 900.800896] __get_user_pages+0x599/0x1650 [ 900.805159] ? follow_page_mask+0x1a60/0x1a60 [ 900.809673] ? lock_acquire+0x170/0x400 [ 900.813648] populate_vma_page_range+0x1fd/0x290 [ 900.818414] __mm_populate+0x1e8/0x350 [ 900.822296] ? populate_vma_page_range+0x290/0x290 [ 900.827215] ? do_mlock+0x6b0/0x6b0 [ 900.830859] __x64_sys_mlockall+0x340/0x500 [ 900.835191] do_syscall_64+0xf9/0x620 [ 900.839007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 900.844209] RIP: 0033:0x45c479 [ 900.847409] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 900.866305] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 900.874028] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 900.881292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 900.888693] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 900.895956] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 900.903408] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 900.911042] Task in /syz5 killed as a result of limit of /syz5 [ 900.917241] memory: usage 298920kB, limit 307200kB, failcnt 2456 [ 900.923401] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.930255] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 900.936478] Memory cgroup stats for /syz5: cache:180KB rss:284300KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:231844KB active_anon:38316KB inactive_file:4KB active_file:8KB unevictable:14176KB [ 900.958363] Memory cgroup out of memory: Kill process 30770 (syz-executor.5) score 1163 or sacrifice child [ 900.968395] Killed process 30770 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB 18:12:44 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:44 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6a02, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:44 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33142, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 901.147744] oom_reaper: reaped process 30770 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:12:44 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:44 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002800740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 901.307270] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 18:12:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 901.581601] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:45 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33143, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 902.436523] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:46 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33144, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:46 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002900740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 902.925381] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 903.071252] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 903.083901] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 903.089427] CPU: 0 PID: 31057 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 903.097315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.106667] Call Trace: [ 903.109256] dump_stack+0x188/0x20d [ 903.112878] dump_header+0x159/0xa5e [ 903.116589] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 903.121790] ? ___ratelimit+0x59/0x573 [ 903.125686] oom_kill_process.cold+0x10/0x6dc [ 903.130193] ? task_will_free_mem+0x134/0x6d0 [ 903.134698] out_of_memory+0x349/0x1250 [ 903.138677] ? oom_killer_disable+0x270/0x270 [ 903.143191] mem_cgroup_out_of_memory+0x1c7/0x240 [ 903.148049] ? memcg_event_wake+0x210/0x210 [ 903.152374] ? do_raw_spin_unlock+0x171/0x260 [ 903.156876] try_charge+0xe22/0x1300 [ 903.160597] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 903.165435] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 903.170291] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 903.176354] ? mark_held_locks+0xf0/0xf0 [ 903.180427] mem_cgroup_try_charge+0x249/0x5c0 [ 903.185009] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 903.189954] __handle_mm_fault+0x1cfb/0x3b60 [ 903.194357] ? copy_page_range+0x1e70/0x1e70 [ 903.198780] ? count_memcg_event_mm+0x279/0x4c0 [ 903.203457] handle_mm_fault+0x1a5/0x670 [ 903.207515] __get_user_pages+0x599/0x1650 [ 903.211770] ? follow_page_mask+0x1a60/0x1a60 [ 903.216269] ? lock_acquire+0x170/0x400 [ 903.220256] populate_vma_page_range+0x1fd/0x290 [ 903.225025] __mm_populate+0x1e8/0x350 [ 903.228929] ? populate_vma_page_range+0x290/0x290 [ 903.233861] ? do_mlock+0x6b0/0x6b0 [ 903.237503] __x64_sys_mlockall+0x340/0x500 [ 903.241844] do_syscall_64+0xf9/0x620 [ 903.245659] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 903.250841] RIP: 0033:0x45c479 [ 903.254035] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 903.273027] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 903.280744] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 903.288014] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 903.295285] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 903.302571] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 903.309849] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 903.318324] Task in /syz5 killed as a result of limit of /syz5 [ 903.324357] memory: usage 307200kB, limit 307200kB, failcnt 2471 [ 903.330755] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 903.337682] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 903.343833] Memory cgroup stats for /syz5: cache:180KB rss:292436KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:240124KB active_anon:38316KB inactive_file:4KB active_file:8KB unevictable:14120KB [ 903.365517] Memory cgroup out of memory: Kill process 30801 (syz-executor.5) score 1163 or sacrifice child [ 903.375426] Killed process 30801 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB 18:12:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 903.488996] oom_reaper: reaped process 30801 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:12:47 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6087, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:47 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33145, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 903.865985] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 904.049053] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:47 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:47 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002a00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:47 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:47 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33146, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 904.321923] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 904.478968] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 904.490448] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 904.495931] CPU: 1 PID: 31088 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 904.503952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.513318] Call Trace: [ 904.515931] dump_stack+0x188/0x20d [ 904.519586] dump_header+0x159/0xa5e [ 904.523336] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 904.528608] ? ___ratelimit+0x59/0x573 [ 904.532529] oom_kill_process.cold+0x10/0x6dc [ 904.537316] ? task_will_free_mem+0x134/0x6d0 [ 904.541873] out_of_memory+0x349/0x1250 [ 904.545890] ? oom_killer_disable+0x270/0x270 [ 904.550476] mem_cgroup_out_of_memory+0x1c7/0x240 [ 904.556214] ? memcg_event_wake+0x210/0x210 [ 904.561026] ? do_raw_spin_unlock+0x171/0x260 [ 904.565538] try_charge+0xe22/0x1300 [ 904.569278] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 904.574267] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 904.579174] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 904.585248] ? mark_held_locks+0xf0/0xf0 [ 904.589340] mem_cgroup_try_charge+0x249/0x5c0 [ 904.593957] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 904.598914] __handle_mm_fault+0x1cfb/0x3b60 [ 904.603344] ? copy_page_range+0x1e70/0x1e70 [ 904.607892] ? count_memcg_event_mm+0x279/0x4c0 [ 904.612606] ? sync_mm_rss+0xa4/0x1b0 [ 904.616428] handle_mm_fault+0x1a5/0x670 [ 904.620508] __get_user_pages+0x599/0x1650 [ 904.624782] ? follow_page_mask+0x1a60/0x1a60 [ 904.629309] ? lock_acquire+0x170/0x400 [ 904.633305] populate_vma_page_range+0x1fd/0x290 [ 904.638091] __mm_populate+0x1e8/0x350 [ 904.642028] ? populate_vma_page_range+0x290/0x290 [ 904.647100] ? do_mlock+0x6b0/0x6b0 [ 904.650751] __x64_sys_mlockall+0x340/0x500 [ 904.655092] do_syscall_64+0xf9/0x620 [ 904.658940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 904.664152] RIP: 0033:0x45c479 [ 904.667376] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 904.686434] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 904.694160] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 904.701446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 904.711549] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 904.718832] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 904.726121] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 904.733712] Task in /syz5 killed as a result of limit of /syz5 [ 904.739973] memory: usage 307200kB, limit 307200kB, failcnt 2513 [ 904.746242] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 904.753137] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 904.759370] Memory cgroup stats for /syz5: cache:180KB rss:292516KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:240124KB active_anon:38316KB inactive_file:12KB active_file:0KB unevictable:14072KB [ 904.781513] Memory cgroup out of memory: Kill process 30821 (syz-executor.5) score 1163 or sacrifice child [ 904.791546] Killed process 30821 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 904.924313] oom_reaper: reaped process 30821 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:12:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 905.168487] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:48 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:49 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33147, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa0000080003000000000008000100100000000a000500040000000000000008000a001d2aa7987c395b2baa4aaf7a735774adea080817c015d011cb0a40a6483f0ff46f99e6c8ce8f67f9d757f7246bb156076f6b8463e7934f3fa852a6b40160380ca4c8687e6009bd7012fe9ab0cf615cb5c7817bf0c12f5e749728eec17d35d2bb4d1555ff37944786857232156ff6d056a2c8dbb583b6da9a9a7f216b3e74830d6d68fa533e37e0a57fc53fe1b12904cbde8d5b59d4bacded5687353f60ceb09b110cf4379f86b26f65a643d9f4bbfcaae8f89834925aa49dda073350c6dd0e9a12c72f3072fe70", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 905.475626] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 905.755331] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 905.766656] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 905.772047] CPU: 1 PID: 31114 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 905.779927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.789286] Call Trace: [ 905.791887] dump_stack+0x188/0x20d [ 905.795523] dump_header+0x159/0xa5e [ 905.799251] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 905.804510] ? ___ratelimit+0x59/0x573 [ 905.808418] oom_kill_process.cold+0x10/0x6dc [ 905.812931] ? task_will_free_mem+0x134/0x6d0 [ 905.817560] out_of_memory+0x349/0x1250 [ 905.821563] ? oom_killer_disable+0x270/0x270 [ 905.826093] mem_cgroup_out_of_memory+0x1c7/0x240 [ 905.830946] ? memcg_event_wake+0x210/0x210 [ 905.835285] ? do_raw_spin_unlock+0x171/0x260 [ 905.839795] try_charge+0xe22/0x1300 [ 905.843526] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 905.848380] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 905.853269] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 905.859337] ? mark_held_locks+0xf0/0xf0 [ 905.863423] mem_cgroup_try_charge+0x249/0x5c0 [ 905.868106] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 905.873041] __handle_mm_fault+0x1cfb/0x3b60 [ 905.877459] ? copy_page_range+0x1e70/0x1e70 [ 905.882055] ? count_memcg_event_mm+0x279/0x4c0 [ 905.886750] handle_mm_fault+0x1a5/0x670 [ 905.890822] __get_user_pages+0x599/0x1650 [ 905.895215] ? follow_page_mask+0x1a60/0x1a60 [ 905.899726] ? lock_acquire+0x170/0x400 [ 905.903734] populate_vma_page_range+0x1fd/0x290 [ 905.908503] __mm_populate+0x1e8/0x350 [ 905.912436] ? populate_vma_page_range+0x290/0x290 [ 905.917371] ? do_mlock+0x6b0/0x6b0 [ 905.921015] __x64_sys_mlockall+0x340/0x500 [ 905.925365] do_syscall_64+0xf9/0x620 [ 905.929174] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 905.934372] RIP: 0033:0x45c479 [ 905.937572] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 905.956479] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 905.964194] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 905.971464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 905.978741] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 905.986018] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 905.993290] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 906.001234] Task in /syz5 killed as a result of limit of /syz5 [ 906.007276] memory: usage 307200kB, limit 307200kB, failcnt 2536 [ 906.013429] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.020275] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 906.026477] Memory cgroup stats for /syz5: cache:180KB rss:292444KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:240124KB active_anon:38316KB inactive_file:4KB active_file:4KB unevictable:14008KB [ 906.048492] Memory cgroup out of memory: Kill process 30839 (syz-executor.5) score 1163 or sacrifice child [ 906.058789] Killed process 30839 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 906.901683] oom_reaper: reaped process 30839 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 906.938709] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002b00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) mlockall(0x3) 18:12:50 executing program 0: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4800, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:50 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:50 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33148, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 907.709382] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 907.713042] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 907.720658] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 907.720688] CPU: 0 PID: 31139 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 907.720793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.720798] Call Trace: [ 907.720821] dump_stack+0x188/0x20d [ 907.720838] dump_header+0x159/0xa5e [ 907.720857] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 907.720870] ? ___ratelimit+0x59/0x573 [ 907.720889] oom_kill_process.cold+0x10/0x6dc [ 907.720908] ? task_will_free_mem+0x134/0x6d0 [ 907.720926] out_of_memory+0x349/0x1250 [ 907.720944] ? oom_killer_disable+0x270/0x270 [ 907.720969] mem_cgroup_out_of_memory+0x1c7/0x240 [ 907.720985] ? memcg_event_wake+0x210/0x210 [ 907.721008] ? do_raw_spin_unlock+0x171/0x260 [ 907.721030] try_charge+0xe22/0x1300 [ 907.804682] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 907.809639] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 907.814483] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 907.820539] ? mark_held_locks+0xf0/0xf0 [ 907.824605] mem_cgroup_try_charge+0x249/0x5c0 [ 907.829296] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 907.834238] __handle_mm_fault+0x1cfb/0x3b60 [ 907.838666] ? copy_page_range+0x1e70/0x1e70 [ 907.843085] ? count_memcg_event_mm+0x279/0x4c0 [ 907.847778] handle_mm_fault+0x1a5/0x670 [ 907.851838] __get_user_pages+0x599/0x1650 [ 907.856074] ? follow_page_mask+0x1a60/0x1a60 [ 907.860570] ? lock_acquire+0x170/0x400 [ 907.864540] populate_vma_page_range+0x1fd/0x290 [ 907.869292] __mm_populate+0x1e8/0x350 [ 907.873175] ? populate_vma_page_range+0x290/0x290 [ 907.878095] ? do_mlock+0x6b0/0x6b0 [ 907.881720] __x64_sys_mlockall+0x340/0x500 [ 907.886038] do_syscall_64+0xf9/0x620 [ 907.889836] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 907.895012] RIP: 0033:0x45c479 [ 907.898204] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.917093] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 907.924802] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 907.932059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 907.939339] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 907.946601] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 907.954246] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 907.963092] Task in /syz5 killed as a result of limit of /syz5 [ 907.969188] memory: usage 307200kB, limit 307200kB, failcnt 6569 [ 907.975731] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 907.982493] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 907.988702] Memory cgroup stats for /syz5: cache:180KB rss:292300KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:240124KB active_anon:38316KB inactive_file:4KB active_file:8KB unevictable:13940KB [ 908.010592] Memory cgroup out of memory: Kill process 30870 (syz-executor.5) score 1163 or sacrifice child [ 908.020554] Killed process 30870 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 908.042134] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 908.053434] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 908.056502] oom_reaper: reaped process 30870 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 908.059184] CPU: 0 PID: 31139 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 908.077038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.086406] Call Trace: [ 908.089041] dump_stack+0x188/0x20d [ 908.092688] dump_header+0x159/0xa5e [ 908.096423] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 908.101535] ? ___ratelimit+0x59/0x573 [ 908.105438] oom_kill_process.cold+0x10/0x6dc [ 908.109952] ? task_will_free_mem+0x134/0x6d0 [ 908.114464] out_of_memory+0x349/0x1250 [ 908.118454] ? oom_killer_disable+0x270/0x270 [ 908.122975] mem_cgroup_out_of_memory+0x1c7/0x240 [ 908.127834] ? memcg_event_wake+0x210/0x210 [ 908.132176] ? do_raw_spin_unlock+0x171/0x260 [ 908.136682] try_charge+0xe22/0x1300 [ 908.140420] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 908.145278] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 908.150136] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 908.156210] ? mark_held_locks+0xf0/0xf0 [ 908.160302] mem_cgroup_try_charge+0x249/0x5c0 [ 908.164878] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 908.169799] __handle_mm_fault+0x1cfb/0x3b60 [ 908.174201] ? copy_page_range+0x1e70/0x1e70 [ 908.178612] ? count_memcg_event_mm+0x279/0x4c0 [ 908.183303] handle_mm_fault+0x1a5/0x670 [ 908.187375] __get_user_pages+0x599/0x1650 [ 908.191612] ? follow_page_mask+0x1a60/0x1a60 [ 908.196111] ? lock_acquire+0x170/0x400 [ 908.200080] populate_vma_page_range+0x1fd/0x290 [ 908.204836] __mm_populate+0x1e8/0x350 [ 908.208723] ? populate_vma_page_range+0x290/0x290 [ 908.213647] ? do_mlock+0x6b0/0x6b0 [ 908.217290] __x64_sys_mlockall+0x340/0x500 [ 908.221609] do_syscall_64+0xf9/0x620 [ 908.225419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 908.230602] RIP: 0033:0x45c479 [ 908.233789] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 908.252681] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 908.260378] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 908.267631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 908.274887] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 908.282144] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 908.289403] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 908.296887] Task in /syz5 killed as a result of limit of /syz5 [ 908.302894] memory: usage 290112kB, limit 307200kB, failcnt 6596 [ 908.309149] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.315959] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 908.322126] Memory cgroup stats for /syz5: cache:180KB rss:275384KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:221612KB active_anon:38316KB inactive_file:4KB active_file:4KB unevictable:15552KB [ 908.343896] Memory cgroup out of memory: Kill process 31130 (syz-executor.5) score 1167 or sacrifice child [ 908.355240] Killed process 31130 (syz-executor.5) total-vm:74832kB, anon-rss:15380kB, file-rss:39080kB, shmem-rss:0kB [ 908.366443] oom_reaper: reaped process 31130 (syz-executor.5), now anon-rss:15600kB, file-rss:40060kB, shmem-rss:0kB [ 908.380226] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) mlockall(0x3) 18:12:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:12:52 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33149, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 908.616889] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 910.406644] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 910.418528] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 910.424218] CPU: 1 PID: 31159 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 910.432110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.441611] Call Trace: [ 910.444224] dump_stack+0x188/0x20d [ 910.448004] dump_header+0x159/0xa5e [ 910.451727] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 910.456937] ? ___ratelimit+0x59/0x573 [ 910.460852] oom_kill_process.cold+0x10/0x6dc [ 910.465359] ? mem_cgroup_get_max+0xa3/0x240 [ 910.469776] out_of_memory+0x349/0x1250 [ 910.473760] ? oom_killer_disable+0x270/0x270 [ 910.478285] mem_cgroup_out_of_memory+0x1c7/0x240 [ 910.483152] ? memcg_event_wake+0x210/0x210 [ 910.487479] ? do_raw_spin_unlock+0x171/0x260 [ 910.492117] try_charge+0xe22/0x1300 [ 910.495836] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 910.500689] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 910.505640] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 910.511720] mem_cgroup_try_charge+0x249/0x5c0 [ 910.516328] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 910.521260] wp_page_copy+0x3fe/0x1530 [ 910.525178] ? follow_pfn+0x260/0x260 [ 910.528992] ? __lock_acquire+0x6ee/0x49c0 [ 910.533230] do_wp_page+0x518/0xfa0 [ 910.536879] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 910.541654] __handle_mm_fault+0x21a4/0x3b60 [ 910.546091] ? copy_page_range+0x1e70/0x1e70 [ 910.550527] ? count_memcg_event_mm+0x2a4/0x4c0 [ 910.555199] handle_mm_fault+0x1a5/0x670 [ 910.559285] __get_user_pages+0x599/0x1650 [ 910.563526] ? follow_page_mask+0x1a60/0x1a60 [ 910.568028] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 910.572806] ? retint_kernel+0x2d/0x2d [ 910.576699] populate_vma_page_range+0x1fd/0x290 [ 910.581466] __mm_populate+0x1e8/0x350 [ 910.585354] ? populate_vma_page_range+0x290/0x290 [ 910.590277] ? do_mlock+0x6b0/0x6b0 [ 910.593933] __x64_sys_mlockall+0x340/0x500 [ 910.598255] do_syscall_64+0xf9/0x620 [ 910.602066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 910.607259] RIP: 0033:0x45c479 [ 910.610587] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.629614] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 910.637325] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 910.644598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 910.651865] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 910.659140] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 910.666401] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 910.675187] Task in /syz5 killed as a result of limit of /syz5 [ 910.681433] memory: usage 307196kB, limit 307200kB, failcnt 6605 [ 910.687748] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.694659] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 910.701014] Memory cgroup stats for /syz5: cache:180KB rss:292252KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:235616KB active_anon:38292KB inactive_file:12KB active_file:0KB unevictable:18380KB [ 910.723334] Memory cgroup out of memory: Kill process 31157 (syz-executor.5) score 1233 or sacrifice child [ 910.734523] Killed process 31160 (syz-executor.5) total-vm:74832kB, anon-rss:18380kB, file-rss:34944kB, shmem-rss:0kB 18:12:54 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:54 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:54 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002c00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:12:54 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:54 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:54 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3314a, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:12:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) mlockall(0x3) [ 912.240020] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:55 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3314b, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002d00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 912.544386] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:56 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:12:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:12:56 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3314c, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 912.877347] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 912.888634] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 912.894022] CPU: 0 PID: 31215 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 912.901903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.911363] Call Trace: [ 912.913971] dump_stack+0x188/0x20d [ 912.917709] dump_header+0x159/0xa5e [ 912.921437] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 912.926544] ? ___ratelimit+0x59/0x573 [ 912.930444] oom_kill_process.cold+0x10/0x6dc [ 912.934955] ? task_will_free_mem+0x134/0x6d0 [ 912.939463] out_of_memory+0x349/0x1250 [ 912.943451] ? oom_killer_disable+0x270/0x270 [ 912.947967] mem_cgroup_out_of_memory+0x1c7/0x240 [ 912.952822] ? memcg_event_wake+0x210/0x210 [ 912.957167] ? do_raw_spin_unlock+0x171/0x260 [ 912.961665] try_charge+0xe22/0x1300 [ 912.965395] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 912.970243] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 912.975096] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 912.981162] ? mark_held_locks+0xf0/0xf0 [ 912.985254] mem_cgroup_try_charge+0x249/0x5c0 [ 912.989850] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 912.994799] __handle_mm_fault+0x1cfb/0x3b60 [ 912.999220] ? copy_page_range+0x1e70/0x1e70 [ 913.003643] ? count_memcg_event_mm+0x279/0x4c0 [ 913.008447] handle_mm_fault+0x1a5/0x670 [ 913.012527] __get_user_pages+0x599/0x1650 [ 913.017007] ? follow_page_mask+0x1a60/0x1a60 [ 913.021549] ? lock_acquire+0x170/0x400 [ 913.025546] populate_vma_page_range+0x1fd/0x290 [ 913.030316] __mm_populate+0x1e8/0x350 [ 913.034220] ? populate_vma_page_range+0x290/0x290 [ 913.039167] ? do_mlock+0x6b0/0x6b0 [ 913.042838] __x64_sys_mlockall+0x340/0x500 [ 913.047176] do_syscall_64+0xf9/0x620 [ 913.051000] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 913.056211] RIP: 0033:0x45c479 [ 913.059413] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.078335] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 913.086057] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 913.093331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 913.100605] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 913.107884] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 913.115161] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 913.122657] Task in /syz5 killed as a result of limit of /syz5 [ 913.128706] memory: usage 307200kB, limit 307200kB, failcnt 6637 [ 913.134854] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.141777] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 913.147964] Memory cgroup stats for /syz5: cache:180KB rss:292204KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:239992KB active_anon:38316KB inactive_file:12KB active_file:4KB unevictable:13980KB [ 913.169711] Memory cgroup out of memory: Kill process 30887 (syz-executor.5) score 1163 or sacrifice child [ 913.179739] Killed process 30887 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 914.528463] oom_reaper: reaped process 30887 (syz-executor.5), now anon-rss:0kB, file-rss:34688kB, shmem-rss:0kB 18:12:58 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:12:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 914.677659] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:12:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:12:58 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3314d, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:12:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 915.179740] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 915.521016] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 915.532310] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 915.537775] CPU: 0 PID: 31246 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 915.545664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.555020] Call Trace: [ 915.557626] dump_stack+0x188/0x20d [ 915.561266] dump_header+0x159/0xa5e [ 915.565001] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 915.570124] ? ___ratelimit+0x59/0x573 [ 915.574031] oom_kill_process.cold+0x10/0x6dc [ 915.578550] ? task_will_free_mem+0x134/0x6d0 [ 915.583174] out_of_memory+0x349/0x1250 [ 915.587175] ? oom_killer_disable+0x270/0x270 [ 915.591778] mem_cgroup_out_of_memory+0x1c7/0x240 [ 915.596673] ? memcg_event_wake+0x210/0x210 [ 915.601026] ? do_raw_spin_unlock+0x171/0x260 [ 915.605533] try_charge+0xe22/0x1300 [ 915.609267] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 915.614130] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 915.618994] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 915.625062] ? mark_held_locks+0xf0/0xf0 [ 915.629143] mem_cgroup_try_charge+0x249/0x5c0 [ 915.633742] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 915.638688] __handle_mm_fault+0x1cfb/0x3b60 [ 915.643206] ? copy_page_range+0x1e70/0x1e70 [ 915.647636] ? count_memcg_event_mm+0x279/0x4c0 [ 915.652360] handle_mm_fault+0x1a5/0x670 [ 915.656439] __get_user_pages+0x599/0x1650 [ 915.660691] ? follow_page_mask+0x1a60/0x1a60 [ 915.665212] ? lock_acquire+0x170/0x400 [ 915.669202] populate_vma_page_range+0x1fd/0x290 [ 915.674090] __mm_populate+0x1e8/0x350 [ 915.678000] ? populate_vma_page_range+0x290/0x290 [ 915.682937] ? do_mlock+0x6b0/0x6b0 [ 915.686759] __x64_sys_mlockall+0x340/0x500 [ 915.691104] do_syscall_64+0xf9/0x620 [ 915.694930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 915.700132] RIP: 0033:0x45c479 [ 915.703334] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.722243] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 915.729965] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 915.737405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 915.744697] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 915.751974] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 915.759254] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 915.767714] Task in /syz5 killed as a result of limit of /syz5 [ 915.773721] memory: usage 307200kB, limit 307200kB, failcnt 12679 [ 915.780031] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.786857] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 915.793009] Memory cgroup stats for /syz5: cache:180KB rss:292152KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:239992KB active_anon:38316KB inactive_file:8KB active_file:8KB unevictable:13928KB [ 915.814782] Memory cgroup out of memory: Kill process 30917 (syz-executor.5) score 1163 or sacrifice child [ 915.824685] Killed process 30917 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB 18:13:00 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002e00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:13:00 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3314e, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 916.874553] oom_reaper: reaped process 30917 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:13:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 917.366621] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:13:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) mlockall(0x3) [ 917.742081] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 917.753560] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 917.759047] CPU: 0 PID: 31266 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 917.766937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 917.776306] Call Trace: [ 917.778914] dump_stack+0x188/0x20d [ 917.782567] dump_header+0x159/0xa5e [ 917.786308] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 917.791429] ? ___ratelimit+0x59/0x573 [ 917.795357] oom_kill_process.cold+0x10/0x6dc [ 917.799869] ? task_will_free_mem+0x134/0x6d0 [ 917.804394] out_of_memory+0x349/0x1250 [ 917.808392] ? oom_killer_disable+0x270/0x270 [ 917.812926] mem_cgroup_out_of_memory+0x1c7/0x240 [ 917.817872] ? memcg_event_wake+0x210/0x210 [ 917.822213] ? do_raw_spin_unlock+0x171/0x260 [ 917.826720] try_charge+0xe22/0x1300 [ 917.830437] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 917.835290] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 917.840128] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 917.846176] ? mark_held_locks+0xf0/0xf0 [ 917.851205] mem_cgroup_try_charge+0x249/0x5c0 [ 917.855801] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 917.860746] __handle_mm_fault+0x1cfb/0x3b60 [ 917.865164] ? copy_page_range+0x1e70/0x1e70 [ 917.869588] ? count_memcg_event_mm+0x279/0x4c0 [ 917.874271] handle_mm_fault+0x1a5/0x670 [ 917.878353] __get_user_pages+0x599/0x1650 [ 917.882591] ? follow_page_mask+0x1a60/0x1a60 [ 917.887159] ? lock_acquire+0x170/0x400 [ 917.891149] populate_vma_page_range+0x1fd/0x290 [ 917.895905] __mm_populate+0x1e8/0x350 [ 917.899809] ? populate_vma_page_range+0x290/0x290 [ 917.904728] ? do_mlock+0x6b0/0x6b0 [ 917.908370] __x64_sys_mlockall+0x340/0x500 [ 917.912707] do_syscall_64+0xf9/0x620 [ 917.916508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 917.921704] RIP: 0033:0x45c479 [ 917.925024] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.946184] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 917.953904] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 917.961174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 917.968445] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 917.975718] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 917.983093] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 917.991623] Task in /syz5 killed as a result of limit of /syz5 [ 917.999065] memory: usage 307200kB, limit 307200kB, failcnt 16873 [ 918.005467] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.012257] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 918.018457] Memory cgroup stats for /syz5: cache:180KB rss:292080KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:239992KB active_anon:38316KB inactive_file:4KB active_file:12KB unevictable:13856KB [ 918.040226] Memory cgroup out of memory: Kill process 30936 (syz-executor.5) score 1163 or sacrifice child [ 918.050145] Killed process 30936 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB 18:13:02 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 919.426334] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 919.437791] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 919.443341] CPU: 0 PID: 31266 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 919.451233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 919.460786] Call Trace: [ 919.463493] dump_stack+0x188/0x20d [ 919.467147] dump_header+0x159/0xa5e [ 919.470885] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 919.476010] ? ___ratelimit+0x59/0x573 [ 919.479917] oom_kill_process.cold+0x10/0x6dc [ 919.484549] ? task_will_free_mem+0x134/0x6d0 [ 919.489066] out_of_memory+0x349/0x1250 [ 919.493069] ? oom_killer_disable+0x270/0x270 [ 919.497591] mem_cgroup_out_of_memory+0x1c7/0x240 [ 919.502463] ? memcg_event_wake+0x210/0x210 [ 919.506813] ? do_raw_spin_unlock+0x171/0x260 [ 919.511333] try_charge+0xe22/0x1300 [ 919.515081] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 919.519961] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 919.524840] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 919.530927] mem_cgroup_try_charge+0x249/0x5c0 [ 919.535534] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 919.540485] wp_page_copy+0x3fe/0x1530 [ 919.544441] ? follow_pfn+0x260/0x260 [ 919.548258] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 919.552863] do_wp_page+0x518/0xfa0 [ 919.556502] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 919.561293] __handle_mm_fault+0x21a4/0x3b60 [ 919.565724] ? copy_page_range+0x1e70/0x1e70 [ 919.570140] ? count_memcg_event_mm+0x279/0x4c0 [ 919.575015] handle_mm_fault+0x1a5/0x670 [ 919.579106] __get_user_pages+0x599/0x1650 [ 919.583377] ? follow_page_mask+0x1a60/0x1a60 [ 919.587892] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 919.592667] ? retint_kernel+0x2d/0x2d [ 919.597031] populate_vma_page_range+0x1fd/0x290 [ 919.602864] __mm_populate+0x1e8/0x350 [ 919.606780] ? populate_vma_page_range+0x290/0x290 [ 919.611811] ? do_mlock+0x6b0/0x6b0 [ 919.615469] __x64_sys_mlockall+0x340/0x500 [ 919.619806] do_syscall_64+0xf9/0x620 [ 919.623761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 919.629069] RIP: 0033:0x45c479 [ 919.632267] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 919.651177] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 919.659016] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 919.666428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 919.674005] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 919.681287] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 919.688574] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 919.697248] Task in /syz5 killed as a result of limit of /syz5 [ 919.703512] memory: usage 307200kB, limit 307200kB, failcnt 18498 [ 919.709940] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.717056] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 919.723309] Memory cgroup stats for /syz5: cache:180KB rss:291768KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:235080KB active_anon:38292KB inactive_file:4KB active_file:8KB unevictable:18512KB [ 919.745798] Memory cgroup out of memory: Kill process 31261 (syz-executor.5) score 1233 or sacrifice child [ 919.756630] Killed process 31280 (syz-executor.5) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 919.814741] oom_reaper: reaped process 30936 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:13:03 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3314f, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 920.258144] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:03 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002002f00740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:13:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:04 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:13:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) mlockall(0x3) [ 921.627564] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 921.639407] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 921.645417] CPU: 0 PID: 31296 Comm: syz-executor.2 Not tainted 4.19.107-syzkaller #0 [ 921.653374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 921.662737] Call Trace: [ 921.665344] dump_stack+0x188/0x20d [ 921.668982] dump_header+0x159/0xa5e [ 921.672717] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 921.677958] ? ___ratelimit+0x59/0x573 [ 921.681861] oom_kill_process.cold+0x10/0x6dc [ 921.686384] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.691186] ? task_will_free_mem+0x134/0x6d0 [ 921.695790] out_of_memory+0x349/0x1250 [ 921.699786] ? oom_killer_disable+0x270/0x270 [ 921.704315] mem_cgroup_out_of_memory+0x1c7/0x240 [ 921.709171] ? memcg_event_wake+0x210/0x210 [ 921.713514] ? do_raw_spin_unlock+0x171/0x260 [ 921.718021] try_charge+0xe22/0x1300 [ 921.721931] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 921.726792] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 921.731645] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 921.737753] mem_cgroup_try_charge+0x249/0x5c0 [ 921.742358] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 921.747305] wp_page_copy+0x3fe/0x1530 [ 921.751294] ? mark_held_locks+0xa6/0xf0 [ 921.755376] ? follow_pfn+0x260/0x260 [ 921.759214] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.763992] do_wp_page+0x518/0xfa0 [ 921.767633] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 921.772330] __handle_mm_fault+0x21a4/0x3b60 [ 921.776775] ? copy_page_range+0x1e70/0x1e70 [ 921.781198] ? count_memcg_event_mm+0x279/0x4c0 [ 921.785901] handle_mm_fault+0x1a5/0x670 [ 921.789976] __get_user_pages+0x599/0x1650 [ 921.794333] ? follow_page_mask+0x1a60/0x1a60 [ 921.798845] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 921.803617] ? retint_kernel+0x2d/0x2d [ 921.807531] populate_vma_page_range+0x1fd/0x290 [ 921.812304] __mm_populate+0x1e8/0x350 [ 921.816205] ? populate_vma_page_range+0x290/0x290 [ 921.821146] ? do_mlock+0x6b0/0x6b0 [ 921.824793] __x64_sys_mlockall+0x340/0x500 [ 921.829123] do_syscall_64+0xf9/0x620 [ 921.832944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 921.838138] RIP: 0033:0x45c479 [ 921.841355] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 921.860266] RSP: 002b:00007fb4e9107c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 921.868011] RAX: ffffffffffffffda RBX: 00007fb4e91086d4 RCX: 000000000045c479 [ 921.875297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 921.882576] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 921.889853] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 921.897240] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 921.905913] Task in /syz2 killed as a result of limit of /syz2 [ 921.912112] memory: usage 307200kB, limit 307200kB, failcnt 61 [ 921.918208] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.925111] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 921.931352] Memory cgroup stats for /syz2: cache:184KB rss:294648KB rss_huge:8192KB shmem:56KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:264656KB active_anon:9644KB inactive_file:20KB active_file:8KB unevictable:20428KB [ 921.953732] Memory cgroup out of memory: Kill process 31291 (syz-executor.2) score 1233 or sacrifice child [ 921.963734] Killed process 31298 (syz-executor.2) total-vm:74832kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB [ 922.002057] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 922.013473] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 922.019263] CPU: 1 PID: 31295 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 922.027172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 922.036535] Call Trace: [ 922.039142] dump_stack+0x188/0x20d [ 922.042795] dump_header+0x159/0xa5e [ 922.046532] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 922.051756] ? ___ratelimit+0x59/0x573 [ 922.055666] oom_kill_process.cold+0x10/0x6dc [ 922.060173] ? task_will_free_mem+0x134/0x6d0 [ 922.064700] out_of_memory+0x349/0x1250 [ 922.068786] ? oom_killer_disable+0x270/0x270 [ 922.073303] mem_cgroup_out_of_memory+0x1c7/0x240 [ 922.078168] ? memcg_event_wake+0x210/0x210 [ 922.082520] ? do_raw_spin_unlock+0x171/0x260 [ 922.087039] try_charge+0xe22/0x1300 [ 922.090769] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 922.095622] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 922.100487] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 922.106567] ? __lock_acquire+0x6ee/0x49c0 [ 922.110810] mem_cgroup_try_charge+0x249/0x5c0 [ 922.115407] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 922.120358] wp_page_copy+0x3fe/0x1530 [ 922.124270] ? mark_held_locks+0xa6/0xf0 [ 922.128349] ? follow_pfn+0x260/0x260 [ 922.132158] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 922.137025] do_wp_page+0x518/0xfa0 [ 922.140677] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 922.145484] __handle_mm_fault+0x21a4/0x3b60 [ 922.150030] ? copy_page_range+0x1e70/0x1e70 [ 922.154452] ? count_memcg_event_mm+0x279/0x4c0 [ 922.159156] handle_mm_fault+0x1a5/0x670 [ 922.163240] __get_user_pages+0x599/0x1650 [ 922.167500] ? follow_page_mask+0x1a60/0x1a60 [ 922.172020] ? populate_vma_page_range+0x1a6/0x290 [ 922.177066] populate_vma_page_range+0x1fd/0x290 [ 922.181837] __mm_populate+0x1e8/0x350 [ 922.185752] ? populate_vma_page_range+0x290/0x290 [ 922.190682] ? do_mlock+0x6b0/0x6b0 [ 922.194691] __x64_sys_mlockall+0x340/0x500 [ 922.199025] do_syscall_64+0xf9/0x620 [ 922.202837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 922.208031] RIP: 0033:0x45c479 [ 922.211341] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 922.230247] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 922.237967] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 922.245239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 922.252509] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 922.259768] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 922.267036] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 922.274459] Task in /syz5 killed as a result of limit of /syz5 [ 922.280756] memory: usage 307200kB, limit 307200kB, failcnt 18519 [ 922.287125] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.294036] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 922.300330] Memory cgroup stats for /syz5: cache:180KB rss:292012KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:235372KB active_anon:38292KB inactive_file:12KB active_file:0KB unevictable:18380KB [ 922.323439] Memory cgroup out of memory: Kill process 31289 (syz-executor.5) score 1233 or sacrifice child [ 922.334321] Killed process 31297 (syz-executor.5) total-vm:74832kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB 18:13:06 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:06 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33150, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:13:06 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 923.087505] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:06 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:06 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) mlockall(0x3) 18:13:06 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:13:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002003000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:13:07 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33151, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 923.900585] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 924.012777] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 924.024353] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 924.030332] CPU: 1 PID: 31328 Comm: syz-executor.2 Not tainted 4.19.107-syzkaller #0 [ 924.038322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.047683] Call Trace: [ 924.050300] dump_stack+0x188/0x20d [ 924.053951] dump_header+0x159/0xa5e [ 924.057684] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 924.062807] ? ___ratelimit+0x59/0x573 [ 924.066719] oom_kill_process.cold+0x10/0x6dc [ 924.071231] ? out_of_memory+0x2e9/0x1250 [ 924.075434] out_of_memory+0x349/0x1250 [ 924.079452] ? oom_killer_disable+0x270/0x270 [ 924.083973] mem_cgroup_out_of_memory+0x1c7/0x240 [ 924.088838] ? memcg_event_wake+0x210/0x210 [ 924.093448] ? do_raw_spin_unlock+0x171/0x260 [ 924.097959] try_charge+0xe22/0x1300 [ 924.101696] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 924.106672] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 924.111533] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 924.117625] mem_cgroup_try_charge+0x249/0x5c0 [ 924.122224] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 924.127178] wp_page_copy+0x3fe/0x1530 [ 924.131097] ? follow_pfn+0x260/0x260 [ 924.134914] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.139860] do_wp_page+0x518/0xfa0 [ 924.143507] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 924.148186] __handle_mm_fault+0x21a4/0x3b60 [ 924.152939] ? copy_page_range+0x1e70/0x1e70 [ 924.157384] ? count_memcg_event_mm+0x279/0x4c0 [ 924.162085] handle_mm_fault+0x1a5/0x670 [ 924.166145] __get_user_pages+0x599/0x1650 [ 924.170406] ? follow_page_mask+0x1a60/0x1a60 [ 924.174914] ? populate_vma_page_range+0x10e/0x290 [ 924.179852] populate_vma_page_range+0x1fd/0x290 [ 924.184608] __mm_populate+0x1e8/0x350 [ 924.188503] ? populate_vma_page_range+0x290/0x290 [ 924.193431] ? do_mlock+0x6b0/0x6b0 [ 924.197071] __x64_sys_mlockall+0x340/0x500 [ 924.201386] do_syscall_64+0xf9/0x620 [ 924.205191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.210416] RIP: 0033:0x45c479 [ 924.213607] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.232517] RSP: 002b:00007fb4e9128c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 924.240224] RAX: ffffffffffffffda RBX: 00007fb4e91296d4 RCX: 000000000045c479 [ 924.247495] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 924.254759] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 924.262025] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 924.269288] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bf2c [ 924.276881] Task in /syz2 killed as a result of limit of /syz2 [ 924.282899] memory: usage 307200kB, limit 307200kB, failcnt 94 [ 924.289096] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.296035] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 924.302192] Memory cgroup stats for /syz2: cache:184KB rss:294592KB rss_huge:26624KB shmem:56KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:261516KB active_anon:9644KB inactive_file:20KB active_file:8KB unevictable:23580KB [ 924.324087] Memory cgroup out of memory: Kill process 31327 (syz-executor.2) score 1233 or sacrifice child [ 924.334004] Killed process 31332 (syz-executor.2) total-vm:74700kB, anon-rss:18252kB, file-rss:34816kB, shmem-rss:0kB [ 924.718132] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 924.730165] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 924.735942] CPU: 0 PID: 31330 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 924.743828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 924.753169] Call Trace: [ 924.755756] dump_stack+0x188/0x20d [ 924.759377] dump_header+0x159/0xa5e [ 924.763086] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 924.768715] ? ___ratelimit+0x59/0x573 [ 924.772598] oom_kill_process.cold+0x10/0x6dc [ 924.777090] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.781833] ? task_will_free_mem+0x134/0x6d0 [ 924.786324] out_of_memory+0x349/0x1250 [ 924.790292] ? oom_killer_disable+0x270/0x270 [ 924.794789] mem_cgroup_out_of_memory+0x1c7/0x240 [ 924.799622] ? memcg_event_wake+0x210/0x210 [ 924.803942] ? do_raw_spin_unlock+0x171/0x260 [ 924.808424] try_charge+0xe22/0x1300 [ 924.812134] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 924.816980] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 924.821811] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 924.827864] ? lock_downgrade+0x740/0x740 [ 924.832025] mem_cgroup_try_charge+0x249/0x5c0 [ 924.836600] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 924.841519] do_huge_pmd_wp_page+0x921/0x32f0 [ 924.846011] ? __split_huge_pmd+0x29c0/0x29c0 [ 924.850495] ? retint_kernel+0x2d/0x2d [ 924.854373] ? pmd_val+0x7c/0xf0 [ 924.857733] ? add_mm_counter_fast.part.0+0x40/0x40 [ 924.862741] __handle_mm_fault+0x1561/0x3b60 [ 924.867140] ? copy_page_range+0x1e70/0x1e70 [ 924.871540] ? count_memcg_event_mm+0x279/0x4c0 [ 924.876216] handle_mm_fault+0x1a5/0x670 [ 924.880274] __get_user_pages+0x599/0x1650 [ 924.884512] ? follow_page_mask+0x1a60/0x1a60 [ 924.888995] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 924.893744] ? retint_kernel+0x2d/0x2d [ 924.897642] populate_vma_page_range+0x1fd/0x290 [ 924.902393] __mm_populate+0x1e8/0x350 [ 924.906291] ? populate_vma_page_range+0x290/0x290 [ 924.911210] ? call_rwsem_wake+0x17/0x30 [ 924.915266] __x64_sys_mlockall+0x340/0x500 [ 924.919579] do_syscall_64+0xf9/0x620 [ 924.923380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 924.928557] RIP: 0033:0x45c479 [ 924.931740] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 924.950636] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 924.958343] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 924.965612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 924.972874] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 924.980153] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 924.987416] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 924.996015] Task in /syz5 killed as a result of limit of /syz5 [ 925.002294] memory: usage 307200kB, limit 307200kB, failcnt 18552 [ 925.008702] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 925.015649] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 925.021956] Memory cgroup stats for /syz5: cache:180KB rss:290180KB rss_huge:51200KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:225152KB active_anon:38292KB inactive_file:0KB active_file:8KB unevictable:26832KB [ 925.045247] Memory cgroup out of memory: Kill process 31325 (syz-executor.5) score 1233 or sacrifice child [ 925.055462] Killed process 31343 (syz-executor.5) total-vm:74964kB, anon-rss:18508kB, file-rss:34944kB, shmem-rss:0kB 18:13:08 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33152, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 925.074921] oom_reaper: reaped process 31343 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 925.314653] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002003100740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:13:09 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33153, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 925.836331] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 926.001587] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 926.013183] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 926.019168] CPU: 0 PID: 31358 Comm: syz-executor.2 Not tainted 4.19.107-syzkaller #0 [ 926.027071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 926.036440] Call Trace: [ 926.039055] dump_stack+0x188/0x20d [ 926.042712] dump_header+0x159/0xa5e [ 926.046445] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 926.051666] ? ___ratelimit+0x59/0x573 [ 926.055580] oom_kill_process.cold+0x10/0x6dc [ 926.060108] ? out_of_memory+0x26a/0x1250 [ 926.064280] out_of_memory+0x349/0x1250 [ 926.068302] ? oom_killer_disable+0x270/0x270 [ 926.072832] mem_cgroup_out_of_memory+0x1c7/0x240 [ 926.077709] ? memcg_event_wake+0x210/0x210 [ 926.082075] ? do_raw_spin_unlock+0x171/0x260 [ 926.086598] try_charge+0xe22/0x1300 [ 926.090392] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 926.095268] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 926.100345] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 926.106560] mem_cgroup_try_charge+0x249/0x5c0 [ 926.111170] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 926.116129] wp_page_copy+0x3fe/0x1530 [ 926.120042] ? follow_pfn+0x260/0x260 [ 926.123864] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.128658] do_wp_page+0x518/0xfa0 [ 926.132310] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 926.137623] __handle_mm_fault+0x21a4/0x3b60 [ 926.142094] ? copy_page_range+0x1e70/0x1e70 [ 926.146543] ? count_memcg_event_mm+0x279/0x4c0 [ 926.151268] handle_mm_fault+0x1a5/0x670 [ 926.155358] __get_user_pages+0x599/0x1650 [ 926.159619] ? follow_page_mask+0x1a60/0x1a60 [ 926.164131] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 926.169011] ? retint_kernel+0x2d/0x2d [ 926.172926] populate_vma_page_range+0x1fd/0x290 [ 926.177706] __mm_populate+0x1e8/0x350 [ 926.181626] ? populate_vma_page_range+0x290/0x290 [ 926.186674] ? do_mlock+0x6b0/0x6b0 [ 926.190318] __x64_sys_mlockall+0x340/0x500 [ 926.194666] do_syscall_64+0xf9/0x620 [ 926.198488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 926.203683] RIP: 0033:0x45c479 [ 926.206890] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 926.225813] RSP: 002b:00007fb4e9128c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 926.233537] RAX: ffffffffffffffda RBX: 00007fb4e91296d4 RCX: 000000000045c479 [ 926.240815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 926.248117] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 926.255414] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 926.262686] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bf2c [ 926.270353] Task in /syz2 killed as a result of limit of /syz2 [ 926.276679] memory: usage 307200kB, limit 307200kB, failcnt 428 [ 926.282890] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.290089] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 926.296443] Memory cgroup stats for /syz2: cache:184KB rss:294620KB rss_huge:26624KB shmem:56KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:259468KB active_anon:9644KB inactive_file:20KB active_file:8KB unevictable:25584KB [ 926.318744] Memory cgroup out of memory: Kill process 31357 (syz-executor.2) score 1233 or sacrifice child [ 926.329046] Killed process 31361 (syz-executor.2) total-vm:74700kB, anon-rss:18252kB, file-rss:34816kB, shmem-rss:0kB 18:13:10 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:10 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:10 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 927.200372] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 927.211849] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 927.217739] CPU: 1 PID: 31369 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 927.225723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.235088] Call Trace: [ 927.237706] dump_stack+0x188/0x20d [ 927.241356] dump_header+0x159/0xa5e [ 927.245082] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 927.250203] ? ___ratelimit+0x59/0x573 [ 927.254194] oom_kill_process.cold+0x10/0x6dc [ 927.258706] ? task_will_free_mem+0x134/0x6d0 [ 927.263224] out_of_memory+0x349/0x1250 [ 927.267215] ? oom_killer_disable+0x270/0x270 [ 927.271764] mem_cgroup_out_of_memory+0x1c7/0x240 [ 927.276637] ? memcg_event_wake+0x210/0x210 [ 927.280975] ? do_raw_spin_unlock+0x171/0x260 [ 927.285489] try_charge+0xe22/0x1300 [ 927.289222] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 927.294093] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 927.298946] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 927.305586] mem_cgroup_try_charge+0x249/0x5c0 [ 927.310189] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 927.315141] wp_page_copy+0x3fe/0x1530 [ 927.319049] ? follow_pfn+0x260/0x260 [ 927.322862] do_wp_page+0x518/0xfa0 [ 927.326507] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 927.331299] __handle_mm_fault+0x21a4/0x3b60 [ 927.335725] ? copy_page_range+0x1e70/0x1e70 [ 927.340141] ? count_memcg_event_mm+0x279/0x4c0 [ 927.344844] handle_mm_fault+0x1a5/0x670 [ 927.348928] __get_user_pages+0x599/0x1650 [ 927.353191] ? follow_page_mask+0x1a60/0x1a60 [ 927.357720] populate_vma_page_range+0x1fd/0x290 [ 927.362519] __mm_populate+0x1e8/0x350 [ 927.366436] ? populate_vma_page_range+0x290/0x290 [ 927.371379] __x64_sys_mlockall+0x340/0x500 [ 927.375731] do_syscall_64+0xf9/0x620 [ 927.379545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.384745] RIP: 0033:0x45c479 [ 927.387947] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.407812] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 927.415651] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 927.422936] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 927.430219] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 927.437498] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 927.444780] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 927.452185] Task in /syz5 killed as a result of limit of /syz5 [ 927.458613] memory: usage 307200kB, limit 307200kB, failcnt 18571 [ 927.465072] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.472011] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.478445] Memory cgroup stats for /syz5: cache:180KB rss:291920KB rss_huge:36864KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:233212KB active_anon:38292KB inactive_file:4KB active_file:4KB unevictable:20428KB [ 927.500735] Memory cgroup out of memory: Kill process 31367 (syz-executor.5) score 1233 or sacrifice child [ 927.510969] Killed process 31370 (syz-executor.5) total-vm:74832kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB [ 927.634535] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 927.646442] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 927.652121] CPU: 1 PID: 31369 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 927.660115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 927.669479] Call Trace: [ 927.672121] dump_stack+0x188/0x20d [ 927.675772] dump_header+0x159/0xa5e [ 927.679499] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 927.684616] ? ___ratelimit+0x59/0x573 [ 927.688533] oom_kill_process.cold+0x10/0x6dc [ 927.693053] ? task_will_free_mem+0x134/0x6d0 [ 927.697574] out_of_memory+0x349/0x1250 [ 927.701589] ? oom_killer_disable+0x270/0x270 [ 927.706104] mem_cgroup_out_of_memory+0x1c7/0x240 [ 927.710955] ? memcg_event_wake+0x210/0x210 [ 927.715299] ? do_raw_spin_unlock+0x171/0x260 [ 927.719809] try_charge+0xe22/0x1300 [ 927.723551] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 927.728415] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 927.733295] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 927.739389] mem_cgroup_try_charge+0x249/0x5c0 [ 927.743997] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 927.748942] wp_page_copy+0x3fe/0x1530 [ 927.752862] ? follow_pfn+0x260/0x260 [ 927.756678] do_wp_page+0x518/0xfa0 [ 927.760327] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 927.765030] __handle_mm_fault+0x21a4/0x3b60 [ 927.769460] ? copy_page_range+0x1e70/0x1e70 [ 927.773977] ? count_memcg_event_mm+0x279/0x4c0 [ 927.778756] handle_mm_fault+0x1a5/0x670 [ 927.782839] __get_user_pages+0x599/0x1650 [ 927.787094] ? follow_page_mask+0x1a60/0x1a60 [ 927.791612] populate_vma_page_range+0x1fd/0x290 [ 927.796395] __mm_populate+0x1e8/0x350 [ 927.800306] ? populate_vma_page_range+0x290/0x290 [ 927.805254] __x64_sys_mlockall+0x340/0x500 [ 927.809601] do_syscall_64+0xf9/0x620 [ 927.813421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 927.818642] RIP: 0033:0x45c479 [ 927.821839] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 927.840864] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 927.848604] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 927.855880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 927.863164] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 927.870447] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 927.877721] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 927.885224] Task in /syz5 killed as a result of limit of /syz5 [ 927.891324] memory: usage 293240kB, limit 307200kB, failcnt 18613 [ 927.897712] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.904763] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 927.911120] Memory cgroup stats for /syz5: cache:180KB rss:278164KB rss_huge:34816KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:221480KB active_anon:38292KB inactive_file:4KB active_file:4KB unevictable:18380KB [ 927.933529] Memory cgroup out of memory: Kill process 31367 (syz-executor.5) score 1233 or sacrifice child [ 927.944750] Killed process 31367 (syz-executor.5) total-vm:74832kB, anon-rss:18380kB, file-rss:56432kB, shmem-rss:0kB 18:13:11 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:11 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:13:11 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33154, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:13:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:11 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:13:11 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 18:13:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002003200740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 928.363161] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:12 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:13:12 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={r5, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:12 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:12 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 930.221200] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 930.232915] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 930.239085] CPU: 1 PID: 31425 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 930.246978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 930.256490] Call Trace: [ 930.259103] dump_stack+0x188/0x20d [ 930.262761] dump_header+0x159/0xa5e [ 930.266510] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 930.271626] ? ___ratelimit+0x59/0x573 [ 930.275533] oom_kill_process.cold+0x10/0x6dc [ 930.280049] ? task_will_free_mem+0x134/0x6d0 [ 930.284566] out_of_memory+0x349/0x1250 [ 930.288566] ? oom_killer_disable+0x270/0x270 [ 930.293087] mem_cgroup_out_of_memory+0x1c7/0x240 [ 930.297953] ? memcg_event_wake+0x210/0x210 [ 930.302353] ? do_raw_spin_unlock+0x171/0x260 [ 930.306867] try_charge+0xe22/0x1300 [ 930.310612] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 930.315475] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 930.320425] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 930.326508] mem_cgroup_try_charge+0x249/0x5c0 [ 930.331113] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 930.336066] wp_page_copy+0x3fe/0x1530 [ 930.339971] ? retint_kernel+0x2d/0x2d [ 930.343881] ? follow_pfn+0x260/0x260 [ 930.347702] do_wp_page+0x518/0xfa0 [ 930.351354] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 930.356045] __handle_mm_fault+0x21a4/0x3b60 [ 930.360478] ? copy_page_range+0x1e70/0x1e70 [ 930.364988] ? count_memcg_event_mm+0x279/0x4c0 [ 930.369689] handle_mm_fault+0x1a5/0x670 [ 930.373882] __get_user_pages+0x599/0x1650 [ 930.378150] ? follow_page_mask+0x1a60/0x1a60 [ 930.382676] ? populate_vma_page_range+0x10e/0x290 [ 930.387632] populate_vma_page_range+0x1fd/0x290 [ 930.392415] __mm_populate+0x1e8/0x350 [ 930.396407] ? populate_vma_page_range+0x290/0x290 [ 930.401476] ? do_mlock+0x6b0/0x6b0 [ 930.405238] __x64_sys_mlockall+0x340/0x500 [ 930.409578] do_syscall_64+0xf9/0x620 [ 930.413400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 930.418600] RIP: 0033:0x45c479 [ 930.421823] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 930.440734] RSP: 002b:00007ffaa532dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 930.448459] RAX: ffffffffffffffda RBX: 00007ffaa532e6d4 RCX: 000000000045c479 [ 930.455738] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 930.463135] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 930.470594] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 930.477892] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 930.487384] Task in /syz5 killed as a result of limit of /syz5 [ 930.493768] memory: usage 307200kB, limit 307200kB, failcnt 18622 [ 930.500501] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.507700] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 930.514134] Memory cgroup stats for /syz5: cache:180KB rss:291716KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:235256KB active_anon:38292KB inactive_file:4KB active_file:4KB unevictable:18380KB [ 930.537593] Memory cgroup out of memory: Kill process 31420 (syz-executor.5) score 1233 or sacrifice child [ 930.547625] Killed process 31429 (syz-executor.5) total-vm:74832kB, anon-rss:18380kB, file-rss:34816kB, shmem-rss:0kB [ 930.642173] ptrace attach of "/root/syz-executor.3"[31437] was attempted by "/root/syz-executor.3"[31438] 18:13:14 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:14 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x33155, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:13:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="00c573350862f4cb39eaff00000000a4550800b21004220d04f8bff7fc701cf8a8a98286cdf549d865851b914cd3620dd0372c8eb7bc7c79383b88de7aeb44ff83aa6ab718e73b904da1659dd82b5faae18e7497f4084bf62a625419de7ad2a507772022a8ceb9ba0002109c7b18b789eae9e12535248bd28b24aef90ac582a01d48894a81e379c24b8686054b79e1d15c25902a835b770a0e65b8ac66160116cec34adca95e4afdb168e4757c2fe0827651b6577f2a30483110cb9d68aeb7fca377cc2e330172cffd3ef55b33ad9485cb6ce61263c84559404bd0a23305d4adcc2e2cef4ded12538c61f5ff7f229e0b9337083e0bc0ee6a1783e25bbb83cf993b004d40a90000"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 930.919615] ptrace attach of "/root/syz-executor.3"[31444] was attempted by "/root/syz-executor.3"[31446] 18:13:14 executing program 3: prctl$PR_GET_SECCOMP(0x15) bind$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 931.010047] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:14 executing program 3: prctl$PR_GET_SECCOMP(0x15) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 931.087516] ptrace attach of "/root/syz-executor.3"[31453] was attempted by "/root/syz-executor.3"[31454] [ 931.225132] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 931.236681] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 931.242083] CPU: 1 PID: 31455 Comm: syz-executor.2 Not tainted 4.19.107-syzkaller #0 [ 931.249999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 931.259626] Call Trace: [ 931.262250] dump_stack+0x188/0x20d [ 931.266001] dump_header+0x159/0xa5e [ 931.269741] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 931.274867] ? ___ratelimit+0x59/0x573 [ 931.278779] oom_kill_process.cold+0x10/0x6dc [ 931.283306] ? task_will_free_mem+0x134/0x6d0 [ 931.287829] out_of_memory+0x349/0x1250 [ 931.291834] ? oom_killer_disable+0x270/0x270 [ 931.296366] mem_cgroup_out_of_memory+0x1c7/0x240 [ 931.301230] ? memcg_event_wake+0x210/0x210 [ 931.305590] ? do_raw_spin_unlock+0x171/0x260 [ 931.310106] try_charge+0xe22/0x1300 [ 931.313849] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 931.318709] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 931.323570] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 931.329646] ? mark_held_locks+0xf0/0xf0 [ 931.333843] mem_cgroup_try_charge+0x249/0x5c0 [ 931.338494] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 931.343447] __handle_mm_fault+0x1cfb/0x3b60 [ 931.347880] ? copy_page_range+0x1e70/0x1e70 [ 931.352311] ? count_memcg_event_mm+0x279/0x4c0 [ 931.357019] handle_mm_fault+0x1a5/0x670 [ 931.361101] __get_user_pages+0x599/0x1650 [ 931.365369] ? follow_page_mask+0x1a60/0x1a60 [ 931.369896] ? lock_acquire+0x170/0x400 18:13:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002003300740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:13:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 931.373895] populate_vma_page_range+0x1fd/0x290 [ 931.378788] __mm_populate+0x1e8/0x350 [ 931.382833] ? populate_vma_page_range+0x290/0x290 [ 931.387776] ? do_mlock+0x6b0/0x6b0 [ 931.391463] __x64_sys_mlockall+0x340/0x500 [ 931.395804] do_syscall_64+0xf9/0x620 [ 931.399630] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 931.404832] RIP: 0033:0x45c479 [ 931.408033] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 931.427063] RSP: 002b:00007fb4e9107c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 931.434790] RAX: ffffffffffffffda RBX: 00007fb4e91086d4 RCX: 000000000045c479 [ 931.442085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 931.449370] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 931.456645] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 931.463927] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 931.471607] Task in /syz2 killed as a result of limit of /syz2 [ 931.477660] memory: usage 307200kB, limit 307200kB, failcnt 462 [ 931.483821] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.490662] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 931.496849] Memory cgroup stats for /syz2: cache:184KB rss:294556KB rss_huge:16384KB shmem:56KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:274312KB active_anon:9664KB inactive_file:20KB active_file:8KB unevictable:10716KB [ 931.518696] Memory cgroup out of memory: Kill process 30647 (syz-executor.2) score 1163 or sacrifice child [ 931.528605] Killed process 30647 (syz-executor.2) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 931.631066] syz-executor.2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 932.121707] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 932.148456] CPU: 1 PID: 31451 Comm: syz-executor.2 Not tainted 4.19.107-syzkaller #0 [ 932.156994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 932.166365] Call Trace: [ 932.168975] dump_stack+0x188/0x20d [ 932.172627] dump_header+0x159/0xa5e [ 932.176386] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 932.181507] ? ___ratelimit+0x59/0x573 [ 932.185428] oom_kill_process.cold+0x10/0x6dc [ 932.191255] ? task_will_free_mem+0x134/0x6d0 [ 932.196074] out_of_memory+0x349/0x1250 [ 932.200243] ? oom_killer_disable+0x270/0x270 [ 932.204770] mem_cgroup_out_of_memory+0x1c7/0x240 [ 932.209760] ? memcg_event_wake+0x210/0x210 [ 932.214301] ? do_raw_spin_unlock+0x171/0x260 [ 932.218938] try_charge+0xbdf/0x1300 [ 932.223457] ? should_fail+0x142/0x7bc [ 932.227374] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 932.232236] ? __isolate_free_page+0x4c0/0x4c0 [ 932.236868] ? rcu_read_lock_sched_held+0x10a/0x130 [ 932.242002] ? __alloc_pages_nodemask+0x5d1/0x6a0 [ 932.246874] memcg_kmem_charge_memcg+0x7b/0x150 [ 932.251559] ? memcg_kmem_put_cache+0xb0/0xb0 [ 932.256074] ? kmem_cache_alloc_node+0xe7/0x730 [ 932.260856] ? cache_grow_begin+0x580/0x8a0 [ 932.265201] cache_grow_begin+0x3ed/0x8a0 [ 932.269368] fallback_alloc+0x205/0x2d0 [ 932.273372] kmem_cache_alloc_node+0xe7/0x730 [ 932.277895] ? _raw_spin_unlock_irq+0x24/0x80 [ 932.282763] copy_process.part.0+0x1d04/0x7a60 [ 932.287388] ? mark_held_locks+0xf0/0xf0 [ 932.291482] ? mark_held_locks+0xf0/0xf0 [ 932.295562] ? dlci_ioctl_set+0x30/0x30 [ 932.299562] ? __cleanup_sighand+0x60/0x60 [ 932.303814] ? lock_downgrade+0x740/0x740 [ 932.308021] ? __might_fault+0x192/0x1d0 [ 932.312104] _do_fork+0x22f/0xf40 [ 932.315606] ? fork_idle+0x1e0/0x1e0 [ 932.319372] ? __x64_sys_clock_gettime+0x165/0x240 [ 932.324344] ? __ia32_sys_clock_settime+0x260/0x260 [ 932.329383] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 932.334238] ? trace_hardirqs_off_caller+0x55/0x210 [ 932.339281] ? do_syscall_64+0x21/0x620 [ 932.343272] do_syscall_64+0xf9/0x620 [ 932.347103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 932.352308] RIP: 0033:0x45c479 [ 932.355522] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 932.374438] RSP: 002b:00007fb4e9128c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 932.382180] RAX: ffffffffffffffda RBX: 00007fb4e91296d4 RCX: 000000000045c479 [ 932.389464] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000 [ 932.397269] RBP: 000000000076bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 932.404640] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 932.412970] R13: 0000000000000074 R14: 00000000004c2d06 R15: 000000000076bf2c [ 932.866958] Task in /syz2 killed as a result of limit of /syz2 [ 932.872994] memory: usage 298412kB, limit 307200kB, failcnt 697 [ 932.879350] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.886239] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 932.892391] Memory cgroup stats for /syz2: cache:184KB rss:285896KB rss_huge:16384KB shmem:56KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:255812KB active_anon:9632KB inactive_file:28KB active_file:0KB unevictable:20560KB 18:13:16 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x40000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) [ 932.914537] Memory cgroup out of memory: Kill process 31450 (syz-executor.2) score 1169 or sacrifice child [ 932.926511] Killed process 31450 (syz-executor.2) total-vm:74964kB, anon-rss:18408kB, file-rss:56424kB, shmem-rss:0kB [ 933.102812] oom_reaper: reaped process 31450 (syz-executor.2), now anon-rss:18420kB, file-rss:56424kB, shmem-rss:0kB [ 933.116242] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 933.128196] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 933.133846] CPU: 0 PID: 31464 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 933.142086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 933.151453] Call Trace: [ 933.154072] dump_stack+0x188/0x20d [ 933.157826] dump_header+0x159/0xa5e [ 933.161574] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 933.166711] ? ___ratelimit+0x59/0x573 [ 933.170623] oom_kill_process.cold+0x10/0x6dc [ 933.175144] ? task_will_free_mem+0x134/0x6d0 [ 933.179661] out_of_memory+0x349/0x1250 [ 933.183660] ? oom_killer_disable+0x270/0x270 [ 933.188185] mem_cgroup_out_of_memory+0x1c7/0x240 [ 933.193045] ? memcg_event_wake+0x210/0x210 [ 933.197391] ? do_raw_spin_unlock+0x171/0x260 [ 933.201902] try_charge+0xe22/0x1300 [ 933.205635] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 933.210505] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 933.215370] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 933.221454] ? retint_kernel+0x2d/0x2d [ 933.225364] mem_cgroup_try_charge+0x249/0x5c0 [ 933.229983] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 933.234932] wp_page_copy+0x3fe/0x1530 [ 933.238843] ? retint_kernel+0x2d/0x2d [ 933.242747] ? follow_pfn+0x260/0x260 [ 933.246568] ? do_wp_page+0x29f/0xfa0 [ 933.250429] do_wp_page+0x518/0xfa0 [ 933.250450] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 933.250473] __handle_mm_fault+0x21a4/0x3b60 [ 933.250491] ? copy_page_range+0x1e70/0x1e70 [ 933.250507] ? count_memcg_event_mm+0x279/0x4c0 [ 933.250541] handle_mm_fault+0x1a5/0x670 [ 933.276349] __get_user_pages+0x599/0x1650 [ 933.280607] ? follow_page_mask+0x1a60/0x1a60 [ 933.285236] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 933.290014] ? retint_kernel+0x2d/0x2d [ 933.293930] populate_vma_page_range+0x1fd/0x290 [ 933.298710] __mm_populate+0x1e8/0x350 [ 933.303053] ? populate_vma_page_range+0x290/0x290 [ 933.307997] ? do_mlock+0x6b0/0x6b0 [ 933.311652] __x64_sys_mlockall+0x340/0x500 [ 933.315996] do_syscall_64+0xf9/0x620 [ 933.319818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 933.325102] RIP: 0033:0x45c479 [ 933.328302] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 933.347240] RSP: 002b:00007ffaa534ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 933.354961] RAX: ffffffffffffffda RBX: 00007ffaa534f6d4 RCX: 000000000045c479 [ 933.362239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 933.369536] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 933.376924] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 933.384212] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bf2c [ 933.395412] Task in /syz5 killed as a result of limit of /syz5 [ 933.401700] memory: usage 307200kB, limit 307200kB, failcnt 18651 [ 933.408179] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.414989] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 933.421312] Memory cgroup stats for /syz5: cache:180KB rss:291948KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:235440KB active_anon:38292KB inactive_file:0KB active_file:4KB unevictable:18252KB [ 933.443823] Memory cgroup out of memory: Kill process 31462 (syz-executor.5) score 1233 or sacrifice child [ 933.454147] Killed process 31470 (syz-executor.5) total-vm:74700kB, anon-rss:18252kB, file-rss:34816kB, shmem-rss:0kB [ 933.507150] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:17 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0ffff, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:13:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002003400740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 934.172402] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:17 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) [ 934.988916] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 935.000492] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 935.006258] CPU: 0 PID: 31485 Comm: syz-executor.2 Not tainted 4.19.107-syzkaller #0 [ 935.014187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.023554] Call Trace: [ 935.026167] dump_stack+0x188/0x20d [ 935.029825] dump_header+0x159/0xa5e [ 935.033566] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 935.038696] ? ___ratelimit+0x59/0x573 [ 935.042611] oom_kill_process.cold+0x10/0x6dc [ 935.047201] ? out_of_memory+0x428/0x1250 [ 935.051385] out_of_memory+0x349/0x1250 [ 935.055906] ? oom_killer_disable+0x270/0x270 [ 935.060429] mem_cgroup_out_of_memory+0x1c7/0x240 [ 935.065329] ? memcg_event_wake+0x210/0x210 [ 935.069676] ? do_raw_spin_unlock+0x171/0x260 [ 935.074184] try_charge+0xe22/0x1300 [ 935.077924] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 935.082790] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 935.087658] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 935.093745] mem_cgroup_try_charge+0x249/0x5c0 [ 935.098362] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 935.103316] wp_page_copy+0x3fe/0x1530 [ 935.107230] ? follow_pfn+0x260/0x260 [ 935.111044] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 935.115824] do_wp_page+0x518/0xfa0 [ 935.119468] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 935.124159] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 935.129018] __handle_mm_fault+0x21a4/0x3b60 [ 935.133440] ? copy_page_range+0x1e70/0x1e70 [ 935.137865] ? count_memcg_event_mm+0x279/0x4c0 [ 935.142653] handle_mm_fault+0x1a5/0x670 [ 935.146731] __get_user_pages+0x599/0x1650 [ 935.150990] ? follow_page_mask+0x1a60/0x1a60 [ 935.155511] ? populate_vma_page_range+0x1c3/0x290 [ 935.160461] populate_vma_page_range+0x1fd/0x290 [ 935.165245] __mm_populate+0x1e8/0x350 [ 935.169145] ? populate_vma_page_range+0x290/0x290 [ 935.174080] ? do_mlock+0x6b0/0x6b0 [ 935.177735] __x64_sys_mlockall+0x340/0x500 [ 935.182076] do_syscall_64+0xf9/0x620 [ 935.185897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 935.191097] RIP: 0033:0x45c479 [ 935.194297] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 935.213208] RSP: 002b:00007fb4e9128c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 935.220931] RAX: ffffffffffffffda RBX: 00007fb4e91296d4 RCX: 000000000045c479 [ 935.228215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 935.235495] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 935.242777] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 935.250063] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bf2c [ 935.257425] Task in /syz2 killed as a result of limit of /syz2 [ 935.263506] memory: usage 307200kB, limit 307200kB, failcnt 735 [ 935.269667] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.276544] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 935.282809] Memory cgroup stats for /syz2: cache:184KB rss:294544KB rss_huge:16384KB shmem:56KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:264700KB active_anon:9632KB inactive_file:16KB active_file:8KB unevictable:20300KB [ 935.305400] Memory cgroup out of memory: Kill process 31484 (syz-executor.2) score 1233 or sacrifice child [ 935.315463] Killed process 31492 (syz-executor.2) total-vm:74700kB, anon-rss:18252kB, file-rss:34816kB, shmem-rss:0kB 18:13:19 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002003500740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:13:19 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:13:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 936.172451] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) [ 937.305642] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 937.317450] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 937.323200] CPU: 1 PID: 31502 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 937.331091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.340454] Call Trace: [ 937.343061] dump_stack+0x188/0x20d [ 937.346841] dump_header+0x159/0xa5e [ 937.350580] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 937.355702] ? ___ratelimit+0x59/0x573 [ 937.359609] oom_kill_process.cold+0x10/0x6dc [ 937.364134] ? task_will_free_mem+0x134/0x6d0 [ 937.368653] out_of_memory+0x349/0x1250 [ 937.372646] ? oom_killer_disable+0x270/0x270 [ 937.377170] mem_cgroup_out_of_memory+0x1c7/0x240 [ 937.382034] ? memcg_event_wake+0x210/0x210 [ 937.386378] ? do_raw_spin_unlock+0x171/0x260 [ 937.390897] try_charge+0xe22/0x1300 [ 937.394628] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 937.399491] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 937.404362] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 937.410446] mem_cgroup_try_charge+0x249/0x5c0 [ 937.415057] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 937.420013] wp_page_copy+0x3fe/0x1530 [ 937.423920] ? follow_pfn+0x260/0x260 [ 937.427751] ? retint_kernel+0x2d/0x2d [ 937.431660] do_wp_page+0x518/0xfa0 [ 937.435307] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 937.440005] __handle_mm_fault+0x21a4/0x3b60 [ 937.444428] ? copy_page_range+0x1e70/0x1e70 [ 937.448859] ? count_memcg_event_mm+0x279/0x4c0 [ 937.453745] handle_mm_fault+0x1a5/0x670 [ 937.457848] __get_user_pages+0x599/0x1650 [ 937.462111] ? follow_page_mask+0x1a60/0x1a60 [ 937.466620] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 937.471398] ? retint_kernel+0x2d/0x2d [ 937.475313] populate_vma_page_range+0x1fd/0x290 [ 937.480087] __mm_populate+0x1e8/0x350 [ 937.483998] ? populate_vma_page_range+0x290/0x290 [ 937.488939] ? do_mlock+0x6b0/0x6b0 [ 937.492586] __x64_sys_mlockall+0x340/0x500 [ 937.496935] do_syscall_64+0xf9/0x620 [ 937.500756] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 937.505956] RIP: 0033:0x45c479 [ 937.509211] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 937.528132] RSP: 002b:00007ffaa534ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 937.535860] RAX: ffffffffffffffda RBX: 00007ffaa534f6d4 RCX: 000000000045c479 [ 937.543141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 937.550427] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 937.557710] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 937.565013] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bf2c [ 937.574929] Task in /syz5 killed as a result of limit of /syz5 [ 937.581475] memory: usage 307200kB, limit 307200kB, failcnt 18681 [ 937.588184] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.595164] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 937.601718] Memory cgroup stats for /syz5: cache:180KB rss:291848KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:235280KB active_anon:38292KB inactive_file:8KB active_file:0KB unevictable:18384KB [ 937.624477] Memory cgroup out of memory: Kill process 31501 (syz-executor.5) score 1233 or sacrifice child [ 937.635049] Killed process 31511 (syz-executor.5) total-vm:74832kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB 18:13:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 938.268930] oom_reaper: reaped process 31511 (syz-executor.5), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 18:13:21 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:21 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:13:22 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000080)={r4, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r4, 0x3ff}, 0x8) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) 18:13:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 938.717151] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 18:13:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 18:13:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7bcf}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3ff}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000002046, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00$\x00'/18, @ANYRES64, @ANYBLOB="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"], 0x3}}, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0xff06}, 0xffffff57) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x101, 0x5, 0x10000, 0x4, 0x10000, 0x20}) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_flags=0x100}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) 18:13:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) getpid() r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002003600740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 18:13:22 executing program 4: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="f37ef879a5ff4cf1ae775ad8ad7ca4c004e3282cfe85f006158cc15bec18c030ffd65bca4f5cb539aecd04a50b0833896a810000004279a9d8cb529c1506057f86d67cbf9b7ea370e533a2044ba6cf48abc8"], 0x64}}, 0x0) 18:13:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@empty, 0x24}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000140)=""/64, 0x40}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 939.226567] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 939.514927] syz-executor.2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 939.526283] syz-executor.2 cpuset=syz2 mems_allowed=0-1 [ 939.531689] CPU: 1 PID: 31569 Comm: syz-executor.2 Not tainted 4.19.107-syzkaller #0 [ 939.539571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.548929] Call Trace: [ 939.551533] dump_stack+0x188/0x20d [ 939.555265] dump_header+0x159/0xa5e [ 939.558988] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 939.564095] ? ___ratelimit+0x59/0x573 [ 939.568112] oom_kill_process.cold+0x10/0x6dc [ 939.572631] ? task_will_free_mem+0x134/0x6d0 [ 939.577143] out_of_memory+0x349/0x1250 [ 939.581136] ? oom_killer_disable+0x270/0x270 [ 939.585677] mem_cgroup_out_of_memory+0x1c7/0x240 [ 939.590533] ? memcg_event_wake+0x210/0x210 [ 939.594867] ? do_raw_spin_unlock+0x171/0x260 [ 939.599369] try_charge+0xe22/0x1300 [ 939.603097] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 939.607958] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 939.612814] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 939.618880] ? mark_held_locks+0xf0/0xf0 [ 939.622968] mem_cgroup_try_charge+0x249/0x5c0 [ 939.627566] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 939.632507] __handle_mm_fault+0x1cfb/0x3b60 [ 939.636932] ? copy_page_range+0x1e70/0x1e70 [ 939.641347] ? count_memcg_event_mm+0x279/0x4c0 [ 939.646039] handle_mm_fault+0x1a5/0x670 [ 939.650112] __get_user_pages+0x599/0x1650 [ 939.654365] ? follow_page_mask+0x1a60/0x1a60 [ 939.658873] ? lock_acquire+0x170/0x400 [ 939.662872] populate_vma_page_range+0x1fd/0x290 [ 939.667735] __mm_populate+0x1e8/0x350 [ 939.671646] ? populate_vma_page_range+0x290/0x290 [ 939.676583] ? do_mlock+0x6b0/0x6b0 [ 939.680231] __x64_sys_mlockall+0x340/0x500 [ 939.684583] do_syscall_64+0xf9/0x620 [ 939.688420] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 939.693618] RIP: 0033:0x45c479 [ 939.696818] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 939.716008] RSP: 002b:00007fb4e9107c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 939.723731] RAX: ffffffffffffffda RBX: 00007fb4e91086d4 RCX: 000000000045c479 [ 939.737532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 939.744821] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 939.752096] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 939.759377] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bfcc [ 939.767071] Task in /syz2 killed as a result of limit of /syz2 [ 939.773072] memory: usage 307200kB, limit 307200kB, failcnt 809 [ 939.779193] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.786019] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 939.792178] Memory cgroup stats for /syz2: cache:184KB rss:294532KB rss_huge:16384KB shmem:56KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:274324KB active_anon:9652KB inactive_file:20KB active_file:8KB unevictable:10632KB [ 939.814044] Memory cgroup out of memory: Kill process 30949 (syz-executor.2) score 1163 or sacrifice child [ 939.823998] Killed process 30949 (syz-executor.2) total-vm:74964kB, anon-rss:18512kB, file-rss:34816kB, shmem-rss:0kB [ 939.852656] syz-executor.5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 939.864163] syz-executor.5 cpuset=syz5 mems_allowed=0-1 [ 939.869791] CPU: 0 PID: 31543 Comm: syz-executor.5 Not tainted 4.19.107-syzkaller #0 [ 939.877666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.887018] Call Trace: [ 939.889622] dump_stack+0x188/0x20d [ 939.893256] dump_header+0x159/0xa5e [ 939.896969] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 939.902242] ? ___ratelimit+0x59/0x573 [ 939.906254] oom_kill_process.cold+0x10/0x6dc [ 939.910755] ? out_of_memory+0x2fc/0x1250 [ 939.914903] ? out_of_memory+0x307/0x1250 [ 939.919056] out_of_memory+0x349/0x1250 [ 939.923043] ? oom_killer_disable+0x270/0x270 [ 939.927567] mem_cgroup_out_of_memory+0x1c7/0x240 [ 939.932425] ? memcg_event_wake+0x210/0x210 [ 939.936751] ? do_raw_spin_unlock+0x171/0x260 [ 939.941266] try_charge+0xe22/0x1300 [ 939.944986] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 939.949855] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 939.954715] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 939.960787] ? retint_kernel+0x2d/0x2d [ 939.964690] ? __lock_acquire+0x6ee/0x49c0 [ 939.972845] mem_cgroup_try_charge+0x249/0x5c0 [ 939.977450] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 939.982379] wp_page_copy+0x3fe/0x1530 [ 939.986286] ? retint_kernel+0x2d/0x2d [ 939.990181] ? follow_pfn+0x260/0x260 [ 939.993982] ? do_wp_page+0x192/0xfa0 [ 939.997799] do_wp_page+0x518/0xfa0 [ 940.001425] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 940.006094] __handle_mm_fault+0x21a4/0x3b60 [ 940.010495] ? copy_page_range+0x1e70/0x1e70 [ 940.014893] ? count_memcg_event_mm+0x279/0x4c0 [ 940.019571] handle_mm_fault+0x1a5/0x670 [ 940.023626] __get_user_pages+0x599/0x1650 [ 940.027862] ? follow_page_mask+0x1a60/0x1a60 [ 940.032348] ? retint_kernel+0x2d/0x2d [ 940.036238] populate_vma_page_range+0x1fd/0x290 [ 940.040991] __mm_populate+0x1e8/0x350 [ 940.044873] ? populate_vma_page_range+0x290/0x290 [ 940.049793] ? do_mlock+0x6b0/0x6b0 [ 940.053432] __x64_sys_mlockall+0x340/0x500 [ 940.057752] do_syscall_64+0xf9/0x620 [ 940.061570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 940.066778] RIP: 0033:0x45c479 [ 940.069979] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 940.088875] RSP: 002b:00007ffaa534ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 940.096586] RAX: ffffffffffffffda RBX: 00007ffaa534f6d4 RCX: 000000000045c479 [ 940.103963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 940.111238] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 940.118515] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 940.125783] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bf2c [ 940.152862] Task in /syz5 killed as a result of limit of /syz5 [ 940.159016] memory: usage 307200kB, limit 307200kB, failcnt 18979 [ 940.165361] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.172151] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 940.179556] Memory cgroup stats for /syz5: cache:180KB rss:291848KB rss_huge:32768KB shmem:20KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:235252KB active_anon:38292KB inactive_file:8KB active_file:0KB unevictable:18384KB [ 940.201611] Memory cgroup out of memory: Kill process 31541 (syz-executor.5) score 1233 or sacrifice child [ 940.212008] Killed process 31552 (syz-executor.5) total-vm:74832kB, anon-rss:18384kB, file-rss:34816kB, shmem-rss:0kB [ 1044.295291] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1044.301733] rcu: (detected by 0, t=10502 jiffies, g=114205, q=82) [ 1044.308082] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295041449-4295030946), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1044.320751] syz-executor.5 R running task 26304 31543 8092 0x80000002 [ 1044.328078] Call Trace: [ 1044.330674] [ 1044.332852] sched_show_task.cold+0x2e2/0x343 [ 1044.337377] ? set_rq_offline.part.0+0x140/0x140 [ 1044.342197] rcu_check_callbacks.cold+0xaf0/0xddc [ 1044.347159] update_process_times+0x2a/0x70 [ 1044.351501] tick_sched_handle+0x9b/0x180 [ 1044.355672] tick_sched_timer+0x42/0x130 [ 1044.359747] __hrtimer_run_queues+0x2fc/0xd50 [ 1044.364265] ? tick_sched_do_timer+0x1a0/0x1a0 [ 1044.368880] ? hrtimer_fixup_activate+0x30/0x30 [ 1044.373568] ? kvm_clock_read+0x14/0x30 [ 1044.377564] ? ktime_get_update_offsets_now+0x2db/0x450 [ 1044.382981] hrtimer_interrupt+0x312/0x770 [ 1044.387246] smp_apic_timer_interrupt+0x10c/0x550 [ 1044.392318] apic_timer_interrupt+0xf/0x20 [ 1044.396559] [ 1044.398815] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 1044.404313] Code: 00 00 e9 24 ec ff ff 90 48 8b 34 24 65 48 8b 04 25 40 ee 01 00 65 8b 15 fc 54 9a 7e 81 e2 00 01 1f 00 75 2b 8b 90 d0 12 00 00 <83> fa 02 75 20 48 8b 88 d8 12 00 00 8b 80 d4 12 00 00 48 8b 11 48 [ 1044.423232] RSP: 0018:ffff8881f9ab7168 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1044.430957] RAX: ffff8880a92fa140 RBX: ffff8880a08d1ca8 RCX: ffffffff818836b5 [ 1044.438233] RDX: 0000000000000002 RSI: ffffffff8188368b RDI: 0000000000000005 [ 1044.445505] RBP: 0000000000000002 R08: ffff8880a92fa140 R09: ffffed1008b799bd [ 1044.452779] R10: ffffed1008b799bc R11: ffff888045bccde7 R12: 0000000000000000 [ 1044.460086] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000004 [ 1044.467378] ? lruvec_lru_size+0x75/0x290 [ 1044.471533] ? lruvec_lru_size+0x4b/0x290 [ 1044.475692] lruvec_lru_size+0x4b/0x290 [ 1044.479670] ? mark_held_locks+0xf0/0xf0 [ 1044.483753] shrink_node_memcg+0x2ee/0x14b0 [ 1044.488728] ? shrink_active_list+0x13e0/0x13e0 [ 1044.493408] ? __lock_is_held+0xad/0x140 [ 1044.497615] ? lock_downgrade+0x740/0x740 [ 1044.501903] ? check_preemption_disabled+0x41/0x280 [ 1044.507082] ? mem_cgroup_iter+0x454/0xb80 [ 1044.511339] ? unregister_memcg_shrinker.isra.0+0x50/0x50 [ 1044.517113] ? mem_cgroup_nr_lru_pages+0x80/0x80 [ 1044.521892] ? mark_held_locks+0xa6/0xf0 [ 1044.525964] ? vmpressure+0x52/0x350 [ 1044.529692] shrink_node+0x270/0x1350 [ 1044.533516] ? shrink_node_memcg+0x14b0/0x14b0 [ 1044.538108] ? kvm_clock_read+0x14/0x30 [ 1044.542147] do_try_to_free_pages+0x3a3/0x1090 [ 1044.546747] ? shrink_node+0x1350/0x1350 [ 1044.550817] ? lock_is_held_type+0x186/0x210 [ 1044.555241] try_to_free_mem_cgroup_pages+0x2ef/0x8b0 [ 1044.560439] ? try_to_free_pages+0x7c0/0x7c0 [ 1044.564861] ? mark_held_locks+0xa6/0xf0 [ 1044.568925] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 1044.574050] try_charge+0x4ca/0x1300 [ 1044.577792] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 1044.582681] ? get_mem_cgroup_from_mm+0x179/0x4f0 [ 1044.587643] ? __mem_cgroup_largest_soft_limit_node+0x440/0x440 [ 1044.593722] ? retint_kernel+0x2d/0x2d [ 1044.597633] ? __lock_acquire+0x6ee/0x49c0 [ 1044.601900] mem_cgroup_try_charge+0x249/0x5c0 [ 1044.606504] mem_cgroup_try_charge_delay+0x1a/0xa0 [ 1044.611459] wp_page_copy+0x3fe/0x1530 [ 1044.615370] ? retint_kernel+0x2d/0x2d [ 1044.619265] ? follow_pfn+0x260/0x260 [ 1044.623082] ? do_wp_page+0x192/0xfa0 [ 1044.626898] do_wp_page+0x518/0xfa0 [ 1044.630535] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 1044.635218] __handle_mm_fault+0x21a4/0x3b60 [ 1044.639643] ? copy_page_range+0x1e70/0x1e70 [ 1044.644493] ? count_memcg_event_mm+0x279/0x4c0 [ 1044.649189] handle_mm_fault+0x1a5/0x670 [ 1044.653279] __get_user_pages+0x599/0x1650 [ 1044.657530] ? follow_page_mask+0x1a60/0x1a60 [ 1044.662032] ? retint_kernel+0x2d/0x2d [ 1044.666029] populate_vma_page_range+0x1fd/0x290 [ 1044.671258] __mm_populate+0x1e8/0x350 [ 1044.675331] ? populate_vma_page_range+0x290/0x290 [ 1044.680268] ? do_mlock+0x6b0/0x6b0 [ 1044.683926] __x64_sys_mlockall+0x340/0x500 [ 1044.688271] do_syscall_64+0xf9/0x620 [ 1044.692086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1044.697283] RIP: 0033:0x45c479 [ 1044.700530] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1044.719612] RSP: 002b:00007ffaa534ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 1044.727333] RAX: ffffffffffffffda RBX: 00007ffaa534f6d4 RCX: 000000000045c479 [ 1044.734803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1044.742164] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1044.749442] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1044.756717] R13: 0000000000000736 R14: 00000000004c9b76 R15: 000000000076bf2c [ 1044.764020] rcu: rcu_preempt kthread starved for 10548 jiffies! g114205 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1044.774585] rcu: RCU grace-period kthread stack dump: [ 1044.779771] rcu_preempt R running task 29072 10 2 0x80000000 [ 1044.786981] Call Trace: [ 1044.789597] ? __schedule+0x866/0x1d80 [ 1044.793497] ? schedule_timeout+0x4c3/0xf20 [ 1044.797933] ? firmware_map_remove+0x19a/0x19a [ 1044.802653] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 1044.807801] schedule+0x8d/0x1b0 [ 1044.811178] schedule_timeout+0x4d1/0xf20 [ 1044.815336] ? usleep_range+0x160/0x160 [ 1044.819326] ? __next_timer_interrupt+0x190/0x190 [ 1044.824184] ? prepare_to_swait_exclusive+0x110/0x110 [ 1044.839665] rcu_gp_kthread+0xcee/0x2060 [ 1044.843773] ? rcu_blocking_is_gp+0x90/0x90 [ 1044.848110] ? _raw_spin_unlock_irqrestore+0x67/0xe0 [ 1044.853224] ? lockdep_hardirqs_on+0x40b/0x5d0 [ 1044.862973] ? _raw_spin_unlock_irqrestore+0xa0/0xe0 [ 1044.868104] ? __kthread_parkme+0xfd/0x1b0 [ 1044.872522] ? rcu_blocking_is_gp+0x90/0x90 [ 1044.876876] kthread+0x34a/0x420 [ 1044.880253] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1044.885894] ret_from_fork+0x24/0x30