&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=00000000000000000000004,uid=', @ANYRESHEX=r0]) statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)) 18:43:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000180)) 18:43:43 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}}}, 0x24}}, 0x0) 18:43:43 executing program 0: r0 = socket(0xa, 0x6, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x20}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x400d1) 18:43:43 executing program 5: r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x2}, 0x10) [ 495.236371][T18143] validate_nla: 27 callbacks suppressed [ 495.236381][T18143] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:43 executing program 1: keyctl$KEYCTL_RESTRICT_KEYRING(0x5, 0x0, 0x0, 0x0) 18:43:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x14}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000100), 0x10) getsockname(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d842ba5de427f058"}}, 0x48}}, 0x0) 18:43:43 executing program 3: r0 = socket(0x25, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x3, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 18:43:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8, 0xfffff000}]}, 0x18}}, 0x0) [ 495.338816][T18150] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:44 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$can_j1939(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x101d0) 18:43:44 executing program 4: bpf$MAP_CREATE(0x3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x200002c0) 18:43:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x10e, 0x3, 0x0, 0x300) [ 495.485036][T18163] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x127, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) 18:43:44 executing program 1: sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 495.552884][T18168] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8, 0xffffff7f}]}, 0x18}}, 0x0) [ 495.778126][T18178] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 495.803462][T18179] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x401070cd, 0xffffffffffffffff) 18:43:44 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 18:43:44 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) read$char_raw(r0, &(0x7f0000001400)={""/16175}, 0x4000) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) 18:43:44 executing program 5: r0 = socket(0xa, 0x80003, 0x1) sendmsg$key(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 18:43:44 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000500)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000880)={0x0, 0x0, 0x0, {0x9, @sdr}}) 18:43:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8, 0xffffff9e}]}, 0x18}}, 0x0) 18:43:44 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x29, 0x0, 0x0) [ 496.237355][T18191] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 496.266049][T18198] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:44 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x206}) 18:43:44 executing program 4: mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x8032, 0xffffffffffffffff, 0x0) 18:43:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8, 0xfffffff0}]}, 0x18}}, 0x0) 18:43:44 executing program 0: r0 = socket(0x10, 0x80002, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070f0000006716df16c9c0"], 0x48}}, 0x0) 18:43:45 executing program 1: r0 = socket(0x23, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={0x0}}, 0x0) 18:43:45 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x10e, 0x4, 0x0, 0x0) [ 496.502231][T18210] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x0, 0x2}) [ 496.542385][T18213] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:47 executing program 3: accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) iopl(0x0) setpgid(0x0, 0x0) 18:43:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8, 0xffffffff}]}, 0x18}}, 0x0) 18:43:47 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) 18:43:47 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x31, 0x0, 0x0) 18:43:47 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x15, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8) 18:43:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0x8912, 0x0) 18:43:47 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000280)) 18:43:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0xf}}, 0x0) 18:43:47 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000200), 0x20000204) 18:43:47 executing program 5: socket(0x1d, 0x0, 0x200) 18:43:47 executing program 0: r0 = socket(0x1e, 0x1, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 18:43:47 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000035c0)={'vxcan1\x00'}) 18:43:47 executing program 1: r0 = socket(0xa, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x17) 18:43:47 executing program 1: r0 = fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18:43:47 executing program 5: r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc0505609, 0x0) 18:43:47 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000007300f9"], 0x54}}, 0x0) 18:43:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8953, 0x0) 18:43:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x2f}}, 0x0) 18:43:47 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x500e, 0x0) 18:43:47 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @multicast1}, &(0x7f00000000c0)=0xffffffffffffff34) 18:43:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x70bd2d}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x890b, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 18:43:48 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c02, 0xffffffffffffffff) 18:43:48 executing program 1: socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005140)=ANY=[], 0x3ec4}}, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 18:43:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x5a}}, 0x0) 18:43:48 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8932, &(0x7f0000000100)={'batadv_slave_0\x00'}) 18:43:48 executing program 0: r0 = socket(0xa, 0x3, 0x9) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, 0x0) 18:43:48 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000200), 0x4) 18:43:48 executing program 3: r0 = socket(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={0x0, 0x50}}, 0x0) 18:43:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 18:43:48 executing program 4: r0 = socket(0x18, 0x0, 0x2) getsockname$llc(r0, 0x0, &(0x7f0000000040)) 18:43:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0xc0}}, 0x0) 18:43:48 executing program 5: r0 = socket(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0xfffffffffffffffe, 0x0) 18:43:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10}], 0x10}}], 0x1, 0x0) 18:43:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x5421, 0x0) 18:43:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) bind$rds(r0, &(0x7f0000000340)={0x10, 0x0, @rand_addr=0x44b}, 0x10) 18:43:48 executing program 5: bpf$MAP_CREATE(0x10, 0x0, 0x0) 18:43:48 executing program 4: r0 = socket(0xa, 0x5, 0x0) sendto$l2tp6(r0, &(0x7f0000000040)="05", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x80}, 0x20) 18:43:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x3a3}}, 0x0) 18:43:48 executing program 0: r0 = socket(0xa, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x84, 0x84, 0x0, 0x0) 18:43:48 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 18:43:48 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x18b542) write$FUSE_DIRENT(r0, &(0x7f0000000400)=ANY=[], 0x10) 18:43:48 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xb, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @empty}}}, 0xe8) 18:43:48 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) accept$unix(r0, 0x0, 0x0) 18:43:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0xec0}}, 0x0) 18:43:48 executing program 3: 18:43:48 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 18:43:48 executing program 5: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1) clone(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) 18:43:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r2, 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "44cd838e7eb10358", "ab5c2919e99c1f8b1e48bc3e4fb134b6", "d310624b", "6444ef8678482caf"}, 0x28) 18:43:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4b0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x3ff}}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x7f}, {0x0, 0x1}]}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x6f, 0x3}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x47, 0x0, 0x7c, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x10, 0x5}, {0x6}, {0xf}, {}]}]}, {0x0, [0x51]}}, 0x0, 0xaf}, 0x20) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 500.348213][T18337] validate_nla: 9 callbacks suppressed [ 500.348229][T18337] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @local, 0x2}, 0x1c, 0x0}, 0x0) [ 500.430539][T18346] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x33fe0}}, 0x0) 18:43:49 executing program 1: 18:43:49 executing program 4: 18:43:49 executing program 5: 18:43:49 executing program 3: 18:43:49 executing program 1: [ 500.673915][T18361] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:49 executing program 4: [ 500.742876][T18365] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:49 executing program 0: 18:43:49 executing program 3: 18:43:49 executing program 5: 18:43:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x20000018}}, 0x0) 18:43:49 executing program 1: 18:43:49 executing program 4: 18:43:49 executing program 5: 18:43:49 executing program 3: 18:43:49 executing program 1: 18:43:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x7ffff000}}, 0x0) 18:43:49 executing program 4: 18:43:49 executing program 0: 18:43:49 executing program 5: 18:43:49 executing program 3: 18:43:49 executing program 4: 18:43:49 executing program 1: 18:43:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0xfffffdef}}, 0x0) 18:43:49 executing program 0: 18:43:50 executing program 5: 18:43:50 executing program 3: 18:43:50 executing program 4: 18:43:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x8}, 0x0) 18:43:50 executing program 1: 18:43:50 executing program 5: 18:43:50 executing program 0: 18:43:50 executing program 3: 18:43:50 executing program 1: [ 501.647842][T18401] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:50 executing program 4: 18:43:50 executing program 3: [ 501.696737][T18405] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:50 executing program 0: 18:43:50 executing program 5: 18:43:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x9}, 0x0) 18:43:50 executing program 4: 18:43:50 executing program 3: 18:43:50 executing program 1: 18:43:50 executing program 0: 18:43:50 executing program 5: [ 501.953035][T18414] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:50 executing program 4: [ 502.004383][T18417] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:50 executing program 1: 18:43:50 executing program 3: 18:43:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x25}, 0x0) 18:43:50 executing program 0: 18:43:50 executing program 5: 18:43:50 executing program 4: 18:43:50 executing program 1: 18:43:50 executing program 3: [ 502.244193][T18427] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:50 executing program 5: 18:43:50 executing program 0: 18:43:50 executing program 4: [ 502.310951][T18429] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x5a}, 0x0) 18:43:51 executing program 1: 18:43:51 executing program 5: 18:43:51 executing program 0: 18:43:51 executing program 3: 18:43:51 executing program 4: 18:43:51 executing program 1: 18:43:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x63}, 0x0) 18:43:51 executing program 5: 18:43:51 executing program 0: 18:43:51 executing program 3: 18:43:51 executing program 1: 18:43:51 executing program 4: 18:43:51 executing program 3: 18:43:51 executing program 1: 18:43:51 executing program 4: 18:43:51 executing program 0: 18:43:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x500}, 0x0) 18:43:51 executing program 5: 18:43:51 executing program 4: 18:43:51 executing program 3: 18:43:51 executing program 5: 18:43:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x7ffffff2}, 0x0) 18:43:51 executing program 1: 18:43:51 executing program 0: 18:43:51 executing program 4: 18:43:51 executing program 3: 18:43:51 executing program 5: 18:43:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x7ffffff8}, 0x0) 18:43:51 executing program 0: 18:43:51 executing program 1: 18:43:51 executing program 3: 18:43:51 executing program 5: 18:43:51 executing program 4: 18:43:52 executing program 1: 18:43:52 executing program 0: 18:43:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x7ffffff9}, 0x0) 18:43:52 executing program 3: 18:43:52 executing program 5: 18:43:52 executing program 4: 18:43:52 executing program 1: 18:43:52 executing program 3: 18:43:52 executing program 0: 18:43:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0xffffff1f}, 0x0) 18:43:52 executing program 4: 18:43:52 executing program 5: 18:43:52 executing program 1: 18:43:52 executing program 3: 18:43:52 executing program 0: 18:43:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x2}, 0x0) 18:43:52 executing program 4: 18:43:52 executing program 5: 18:43:52 executing program 3: 18:43:52 executing program 0: 18:43:52 executing program 5: 18:43:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x3}, 0x0) 18:43:52 executing program 1: 18:43:52 executing program 4: 18:43:52 executing program 3: 18:43:52 executing program 0: 18:43:52 executing program 5: 18:43:52 executing program 4: 18:43:52 executing program 1: 18:43:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4}, 0x0) 18:43:52 executing program 3: 18:43:52 executing program 0: 18:43:52 executing program 4: 18:43:53 executing program 5: 18:43:53 executing program 1: 18:43:53 executing program 3: 18:43:53 executing program 0: 18:43:53 executing program 5: 18:43:53 executing program 1: 18:43:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x5}, 0x0) 18:43:53 executing program 4: 18:43:53 executing program 3: 18:43:53 executing program 5: socket(0x22, 0x0, 0x6) 18:43:53 executing program 1: 18:43:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6}, 0x0) 18:43:53 executing program 0: 18:43:53 executing program 4: 18:43:53 executing program 1: 18:43:53 executing program 3: 18:43:53 executing program 5: 18:43:53 executing program 4: 18:43:53 executing program 0: 18:43:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7}, 0x0) 18:43:53 executing program 1: 18:43:53 executing program 3: 18:43:53 executing program 5: 18:43:53 executing program 4: 18:43:53 executing program 0: 18:43:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x9}, 0x0) 18:43:53 executing program 3: 18:43:53 executing program 1: 18:43:53 executing program 4: 18:43:53 executing program 5: 18:43:53 executing program 0: [ 505.363237][T18565] validate_nla: 16 callbacks suppressed [ 505.363247][T18565] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:54 executing program 1: 18:43:54 executing program 3: 18:43:54 executing program 4: 18:43:54 executing program 0: 18:43:54 executing program 5: [ 505.472172][T18572] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xa}, 0x0) 18:43:54 executing program 1: 18:43:54 executing program 4: 18:43:54 executing program 5: 18:43:54 executing program 3: 18:43:54 executing program 0: [ 505.742068][T18582] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:54 executing program 4: 18:43:54 executing program 5: 18:43:54 executing program 1: [ 505.812848][T18586] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:54 executing program 0: 18:43:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf}, 0x0) 18:43:54 executing program 3: 18:43:54 executing program 1: 18:43:54 executing program 4: 18:43:54 executing program 5: 18:43:54 executing program 0: 18:43:54 executing program 3: 18:43:54 executing program 1: [ 506.136440][T18595] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:54 executing program 0: 18:43:54 executing program 5: [ 506.193157][T18599] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:54 executing program 4: 18:43:54 executing program 3: 18:43:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x48}, 0x0) 18:43:54 executing program 1: 18:43:54 executing program 0: 18:43:54 executing program 5: 18:43:55 executing program 4: [ 506.419919][T18609] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:55 executing program 1: 18:43:55 executing program 3: [ 506.478057][T18612] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:55 executing program 0: 18:43:55 executing program 5: 18:43:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4c}, 0x0) 18:43:55 executing program 1: 18:43:55 executing program 4: 18:43:55 executing program 3: 18:43:55 executing program 0: 18:43:55 executing program 5: 18:43:55 executing program 1: [ 506.742356][T18623] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:55 executing program 3: 18:43:55 executing program 0: [ 506.810716][T18625] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:55 executing program 4: 18:43:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x60}, 0x0) 18:43:55 executing program 1: 18:43:55 executing program 3: 18:43:55 executing program 5: 18:43:55 executing program 0: 18:43:55 executing program 4: 18:43:55 executing program 1: 18:43:55 executing program 5: 18:43:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x68}, 0x0) 18:43:55 executing program 0: 18:43:55 executing program 3: 18:43:55 executing program 4: 18:43:55 executing program 1: 18:43:55 executing program 0: 18:43:55 executing program 5: 18:43:55 executing program 3: 18:43:56 executing program 1: 18:43:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6c}, 0x0) 18:43:56 executing program 4: 18:43:56 executing program 0: 18:43:56 executing program 5: 18:43:56 executing program 1: 18:43:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x74}, 0x0) 18:43:56 executing program 3: 18:43:56 executing program 4: 18:43:56 executing program 1: 18:43:56 executing program 5: 18:43:56 executing program 0: 18:43:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7a}, 0x0) 18:43:56 executing program 3: 18:43:56 executing program 4: 18:43:56 executing program 1: 18:43:56 executing program 0: 18:43:56 executing program 5: 18:43:56 executing program 3: 18:43:56 executing program 4: 18:43:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf0}, 0x0) 18:43:56 executing program 5: 18:43:56 executing program 3: 18:43:56 executing program 1: 18:43:56 executing program 0: 18:43:56 executing program 4: 18:43:56 executing program 5: 18:43:56 executing program 3: 18:43:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x159}, 0x0) 18:43:56 executing program 0: 18:43:56 executing program 4: 18:43:56 executing program 1: 18:43:57 executing program 5: 18:43:57 executing program 3: 18:43:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x300}, 0x0) 18:43:57 executing program 1: 18:43:57 executing program 4: 18:43:57 executing program 0: 18:43:57 executing program 5: 18:43:57 executing program 3: 18:43:57 executing program 0: 18:43:57 executing program 1: 18:43:57 executing program 4: 18:43:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x500}, 0x0) 18:43:57 executing program 5: 18:43:57 executing program 3: 18:43:57 executing program 1: 18:43:57 executing program 4: 18:43:57 executing program 0: 18:43:57 executing program 1: 18:43:57 executing program 5: 18:43:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x600}, 0x0) 18:43:57 executing program 4: 18:43:57 executing program 3: 18:43:57 executing program 0: 18:43:57 executing program 5: 18:43:57 executing program 1: 18:43:57 executing program 3: 18:43:57 executing program 4: 18:43:57 executing program 0: 18:43:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x700}, 0x0) 18:43:57 executing program 3: 18:43:57 executing program 5: 18:43:57 executing program 1: 18:43:58 executing program 4: 18:43:58 executing program 0: 18:43:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x900}, 0x0) 18:43:58 executing program 1: 18:43:58 executing program 4: 18:43:58 executing program 3: 18:43:58 executing program 5: 18:43:58 executing program 0: 18:43:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xa00}, 0x0) 18:43:58 executing program 4: 18:43:58 executing program 3: 18:43:58 executing program 1: 18:43:58 executing program 0: 18:43:58 executing program 5: 18:43:58 executing program 4: 18:43:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xa9b}, 0x0) 18:43:58 executing program 0: 18:43:58 executing program 3: 18:43:58 executing program 1: 18:43:58 executing program 5: 18:43:58 executing program 4: 18:43:58 executing program 3: 18:43:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xec0}, 0x0) 18:43:58 executing program 1: 18:43:58 executing program 4: 18:43:58 executing program 0: 18:43:58 executing program 5: 18:43:59 executing program 3: 18:43:59 executing program 1: 18:43:59 executing program 0: [ 510.486322][T18776] validate_nla: 28 callbacks suppressed [ 510.486333][T18776] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:59 executing program 4: 18:43:59 executing program 5: 18:43:59 executing program 3: 18:43:59 executing program 1: 18:43:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf00}, 0x0) 18:43:59 executing program 0: 18:43:59 executing program 5: 18:43:59 executing program 4: 18:43:59 executing program 1: 18:43:59 executing program 0: 18:43:59 executing program 3: [ 510.877588][T18791] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:59 executing program 4: 18:43:59 executing program 5: [ 510.958179][T18793] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x2000}, 0x0) 18:43:59 executing program 1: 18:43:59 executing program 3: 18:43:59 executing program 0: 18:43:59 executing program 4: 18:43:59 executing program 5: 18:43:59 executing program 1: 18:43:59 executing program 0: [ 511.276738][T18805] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:43:59 executing program 3: 18:43:59 executing program 5: 18:44:00 executing program 4: [ 511.363458][T18807] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x3f00}, 0x0) 18:44:00 executing program 1: 18:44:00 executing program 0: 18:44:00 executing program 3: 18:44:00 executing program 4: 18:44:00 executing program 5: 18:44:00 executing program 1: [ 511.686005][T18817] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:00 executing program 0: 18:44:00 executing program 3: 18:44:00 executing program 4: [ 511.745344][T18820] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4800}, 0x0) 18:44:00 executing program 5: 18:44:00 executing program 1: 18:44:00 executing program 4: 18:44:00 executing program 3: 18:44:00 executing program 5: 18:44:00 executing program 0: 18:44:00 executing program 4: [ 511.991951][T18829] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 512.031726][T18832] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:00 executing program 1: 18:44:00 executing program 3: 18:44:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4c00}, 0x0) 18:44:00 executing program 5: 18:44:00 executing program 0: 18:44:00 executing program 1: 18:44:00 executing program 3: 18:44:00 executing program 4: 18:44:00 executing program 0: [ 512.314083][T18841] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:00 executing program 5: 18:44:00 executing program 1: 18:44:00 executing program 3: 18:44:01 executing program 4: 18:44:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x5901}, 0x0) 18:44:01 executing program 0: 18:44:01 executing program 5: 18:44:01 executing program 1: 18:44:01 executing program 4: 18:44:01 executing program 3: 18:44:01 executing program 0: 18:44:01 executing program 5: 18:44:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6000}, 0x0) 18:44:01 executing program 4: 18:44:01 executing program 1: 18:44:01 executing program 3: 18:44:01 executing program 5: 18:44:01 executing program 0: 18:44:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6800}, 0x0) 18:44:01 executing program 4: 18:44:01 executing program 3: 18:44:01 executing program 1: 18:44:01 executing program 5: 18:44:01 executing program 0: 18:44:01 executing program 4: 18:44:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6c00}, 0x0) 18:44:01 executing program 3: 18:44:01 executing program 5: 18:44:01 executing program 0: 18:44:01 executing program 1: 18:44:01 executing program 4: 18:44:01 executing program 5: 18:44:01 executing program 3: 18:44:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7400}, 0x0) 18:44:01 executing program 4: 18:44:01 executing program 1: 18:44:02 executing program 0: 18:44:02 executing program 5: 18:44:02 executing program 4: 18:44:02 executing program 3: 18:44:02 executing program 1: 18:44:02 executing program 0: 18:44:02 executing program 5: 18:44:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7a00}, 0x0) 18:44:02 executing program 1: 18:44:02 executing program 4: 18:44:02 executing program 3: 18:44:02 executing program 5: 18:44:02 executing program 0: 18:44:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x9b0a}, 0x0) 18:44:02 executing program 0: 18:44:02 executing program 3: 18:44:02 executing program 1: 18:44:02 executing program 5: 18:44:02 executing program 4: 18:44:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xc00e}, 0x0) 18:44:02 executing program 3: 18:44:02 executing program 0: 18:44:02 executing program 5: 18:44:02 executing program 1: 18:44:02 executing program 4: 18:44:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf000}, 0x0) 18:44:02 executing program 3: 18:44:02 executing program 5: 18:44:02 executing program 0: 18:44:02 executing program 4: 18:44:02 executing program 1: 18:44:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x34000}, 0x0) 18:44:03 executing program 3: 18:44:03 executing program 5: 18:44:03 executing program 0: 18:44:03 executing program 4: 18:44:03 executing program 1: 18:44:03 executing program 3: 18:44:03 executing program 5: 18:44:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x400300}, 0x0) 18:44:03 executing program 0: 18:44:03 executing program 4: 18:44:03 executing program 1: 18:44:03 executing program 3: 18:44:03 executing program 5: 18:44:03 executing program 0: 18:44:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xe0ffff}, 0x0) 18:44:03 executing program 1: 18:44:03 executing program 4: 18:44:03 executing program 3: 18:44:03 executing program 5: 18:44:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf0ffff}, 0x0) 18:44:03 executing program 0: 18:44:03 executing program 4: 18:44:03 executing program 3: 18:44:03 executing program 1: 18:44:03 executing program 0: 18:44:03 executing program 5: 18:44:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x1000000}, 0x0) 18:44:03 executing program 3: 18:44:03 executing program 1: 18:44:03 executing program 4: 18:44:03 executing program 0: 18:44:03 executing program 5: 18:44:03 executing program 3: 18:44:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x2000000}, 0x0) 18:44:03 executing program 0: 18:44:03 executing program 1: 18:44:03 executing program 3: 18:44:04 executing program 4: 18:44:04 executing program 5: 18:44:04 executing program 0: 18:44:04 executing program 1: [ 515.503425][T18990] validate_nla: 29 callbacks suppressed [ 515.503435][T18990] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:04 executing program 5: 18:44:04 executing program 1: 18:44:04 executing program 3: 18:44:04 executing program 0: 18:44:04 executing program 4: 18:44:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x3000000}, 0x0) 18:44:04 executing program 5: 18:44:04 executing program 1: 18:44:04 executing program 4: 18:44:04 executing program 0: 18:44:04 executing program 3: [ 515.800793][T19004] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 515.836689][T19007] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:04 executing program 1: 18:44:04 executing program 4: 18:44:04 executing program 5: 18:44:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4000000}, 0x0) 18:44:04 executing program 3: 18:44:04 executing program 0: 18:44:04 executing program 1: 18:44:04 executing program 4: 18:44:04 executing program 5: [ 516.102974][T19018] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:04 executing program 0: 18:44:04 executing program 3: 18:44:04 executing program 1: [ 516.156441][T19021] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:04 executing program 4: 18:44:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x5000000}, 0x0) 18:44:04 executing program 5: 18:44:04 executing program 3: 18:44:04 executing program 0: 18:44:04 executing program 1: 18:44:04 executing program 4: [ 516.384681][T19028] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:05 executing program 5: 18:44:05 executing program 3: [ 516.425611][T19033] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:05 executing program 0: 18:44:05 executing program 1: 18:44:05 executing program 4: 18:44:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6000000}, 0x0) 18:44:05 executing program 5: 18:44:05 executing program 3: 18:44:05 executing program 1: 18:44:05 executing program 4: 18:44:05 executing program 0: 18:44:05 executing program 5: [ 516.713635][T19042] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 516.741273][T19047] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:05 executing program 3: 18:44:05 executing program 1: 18:44:05 executing program 4: 18:44:05 executing program 0: 18:44:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7000000}, 0x0) 18:44:05 executing program 5: 18:44:05 executing program 1: 18:44:05 executing program 4: 18:44:05 executing program 3: [ 516.981425][T19056] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:05 executing program 0: 18:44:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x9000000}, 0x0) 18:44:05 executing program 5: 18:44:05 executing program 1: 18:44:05 executing program 4: 18:44:05 executing program 3: 18:44:05 executing program 0: 18:44:05 executing program 5: 18:44:05 executing program 1: 18:44:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xa000000}, 0x0) 18:44:05 executing program 4: 18:44:05 executing program 3: 18:44:05 executing program 5: 18:44:05 executing program 0: 18:44:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf000000}, 0x0) 18:44:06 executing program 3: 18:44:06 executing program 5: 18:44:06 executing program 4: 18:44:06 executing program 0: 18:44:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x20000000}, 0x0) 18:44:06 executing program 1: 18:44:06 executing program 5: 18:44:06 executing program 3: 18:44:06 executing program 0: 18:44:06 executing program 4: 18:44:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x3f000000}, 0x0) 18:44:06 executing program 5: 18:44:06 executing program 3: 18:44:06 executing program 1: 18:44:06 executing program 4: 18:44:06 executing program 0: 18:44:06 executing program 5: 18:44:06 executing program 3: 18:44:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x48000000}, 0x0) 18:44:06 executing program 1: 18:44:06 executing program 4: 18:44:06 executing program 0: 18:44:06 executing program 5: 18:44:06 executing program 3: 18:44:06 executing program 0: 18:44:06 executing program 1: 18:44:07 executing program 4: 18:44:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4c000000}, 0x0) 18:44:07 executing program 5: 18:44:07 executing program 0: 18:44:07 executing program 3: 18:44:07 executing program 1: 18:44:07 executing program 4: 18:44:07 executing program 5: 18:44:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x59010000}, 0x0) 18:44:07 executing program 0: 18:44:07 executing program 3: 18:44:07 executing program 4: 18:44:07 executing program 1: 18:44:07 executing program 5: 18:44:07 executing program 0: 18:44:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x60000000}, 0x0) 18:44:07 executing program 3: 18:44:07 executing program 1: 18:44:07 executing program 0: 18:44:07 executing program 4: 18:44:07 executing program 5: 18:44:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x68000000}, 0x0) 18:44:07 executing program 3: 18:44:07 executing program 1: 18:44:07 executing program 4: 18:44:07 executing program 0: 18:44:07 executing program 5: 18:44:07 executing program 3: 18:44:07 executing program 1: 18:44:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6c000000}, 0x0) 18:44:07 executing program 4: 18:44:07 executing program 5: 18:44:07 executing program 0: 18:44:08 executing program 1: 18:44:08 executing program 3: 18:44:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x74000000}, 0x0) 18:44:08 executing program 4: 18:44:08 executing program 5: 18:44:08 executing program 0: 18:44:08 executing program 1: 18:44:08 executing program 5: 18:44:08 executing program 4: 18:44:08 executing program 3: 18:44:08 executing program 0: 18:44:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7a000000}, 0x0) 18:44:08 executing program 4: 18:44:08 executing program 1: 18:44:08 executing program 0: 18:44:08 executing program 3: 18:44:08 executing program 5: 18:44:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x9b0a0000}, 0x0) 18:44:08 executing program 4: 18:44:08 executing program 0: 18:44:08 executing program 1: 18:44:08 executing program 5: 18:44:08 executing program 3: 18:44:08 executing program 4: 18:44:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x9effffff}, 0x0) 18:44:08 executing program 0: 18:44:08 executing program 1: 18:44:08 executing program 4: 18:44:08 executing program 5: 18:44:08 executing program 3: 18:44:08 executing program 0: 18:44:08 executing program 1: 18:44:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xc00e0000}, 0x0) 18:44:09 executing program 5: 18:44:09 executing program 3: 18:44:09 executing program 4: 18:44:09 executing program 0: 18:44:09 executing program 1: [ 520.525992][T19213] validate_nla: 27 callbacks suppressed [ 520.526002][T19213] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:09 executing program 3: 18:44:09 executing program 5: 18:44:09 executing program 4: 18:44:09 executing program 0: 18:44:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf0ffffff}, 0x0) [ 520.640557][T19218] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:09 executing program 1: 18:44:09 executing program 0: 18:44:09 executing program 4: 18:44:09 executing program 5: 18:44:09 executing program 3: [ 520.833026][T19225] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:09 executing program 1: 18:44:09 executing program 0: [ 520.884531][T19229] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:09 executing program 4: 18:44:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xffffe000}, 0x0) 18:44:09 executing program 3: 18:44:09 executing program 5: 18:44:09 executing program 0: 18:44:09 executing program 1: 18:44:09 executing program 4: [ 521.135091][T19239] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:09 executing program 3: 18:44:09 executing program 5: [ 521.189124][T19242] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:09 executing program 0: 18:44:09 executing program 1: 18:44:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xfffff000}, 0x0) 18:44:09 executing program 4: 18:44:09 executing program 5: 18:44:09 executing program 3: 18:44:10 executing program 0: 18:44:10 executing program 1: 18:44:10 executing program 4: 18:44:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xffffff7f}, 0x0) [ 521.463183][T19254] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 521.487426][T19256] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:10 executing program 0: 18:44:10 executing program 3: 18:44:10 executing program 5: 18:44:10 executing program 1: 18:44:10 executing program 0: [ 521.593384][T19259] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 521.619332][T19261] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:10 executing program 4: 18:44:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xffffff9e}, 0x0) 18:44:10 executing program 1: 18:44:10 executing program 5: 18:44:10 executing program 3: 18:44:10 executing program 0: 18:44:10 executing program 4: 18:44:10 executing program 1: 18:44:10 executing program 3: 18:44:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xfffffff0}, 0x0) 18:44:10 executing program 5: 18:44:10 executing program 0: 18:44:10 executing program 4: 18:44:10 executing program 1: 18:44:10 executing program 3: 18:44:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x40030000000000}, 0x0) 18:44:10 executing program 5: 18:44:10 executing program 0: 18:44:10 executing program 4: 18:44:10 executing program 1: 18:44:10 executing program 3: 18:44:10 executing program 5: 18:44:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xe0ffff00000000}, 0x0) 18:44:10 executing program 0: 18:44:11 executing program 4: 18:44:11 executing program 3: 18:44:11 executing program 1: 18:44:11 executing program 5: 18:44:11 executing program 0: 18:44:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf0ffffffffffff}, 0x0) 18:44:11 executing program 4: 18:44:11 executing program 3: 18:44:11 executing program 1: 18:44:11 executing program 5: 18:44:11 executing program 0: 18:44:11 executing program 4: 18:44:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x100000000000000}, 0x0) 18:44:11 executing program 1: 18:44:11 executing program 5: 18:44:11 executing program 3: 18:44:11 executing program 0: 18:44:11 executing program 4: 18:44:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x200000000000000}, 0x0) 18:44:11 executing program 1: 18:44:11 executing program 5: 18:44:11 executing program 3: 18:44:11 executing program 0: 18:44:11 executing program 4: 18:44:11 executing program 1: 18:44:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x300000000000000}, 0x0) 18:44:11 executing program 5: 18:44:11 executing program 3: 18:44:11 executing program 1: 18:44:11 executing program 4: 18:44:11 executing program 0: 18:44:11 executing program 5: 18:44:11 executing program 3: 18:44:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x400000000000000}, 0x0) 18:44:12 executing program 0: 18:44:12 executing program 4: 18:44:12 executing program 1: 18:44:12 executing program 5: 18:44:12 executing program 3: 18:44:12 executing program 0: 18:44:12 executing program 1: 18:44:12 executing program 4: 18:44:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x500000000000000}, 0x0) 18:44:12 executing program 5: 18:44:12 executing program 3: 18:44:12 executing program 4: 18:44:12 executing program 1: 18:44:12 executing program 0: 18:44:12 executing program 3: 18:44:12 executing program 5: 18:44:12 executing program 1: 18:44:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x600000000000000}, 0x0) 18:44:12 executing program 4: 18:44:12 executing program 0: 18:44:12 executing program 3: 18:44:12 executing program 5: 18:44:12 executing program 4: 18:44:12 executing program 1: 18:44:12 executing program 0: 18:44:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x700000000000000}, 0x0) 18:44:12 executing program 3: 18:44:12 executing program 5: 18:44:12 executing program 1: 18:44:12 executing program 4: 18:44:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x900000000000000}, 0x0) 18:44:12 executing program 0: 18:44:13 executing program 1: 18:44:13 executing program 3: 18:44:13 executing program 5: 18:44:13 executing program 4: 18:44:13 executing program 0: 18:44:13 executing program 1: 18:44:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xa00000000000000}, 0x0) 18:44:13 executing program 5: 18:44:13 executing program 3: 18:44:13 executing program 4: 18:44:13 executing program 0: 18:44:13 executing program 1: 18:44:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf00000000000000}, 0x0) 18:44:13 executing program 5: 18:44:13 executing program 4: 18:44:13 executing program 3: 18:44:13 executing program 0: 18:44:13 executing program 1: 18:44:13 executing program 5: 18:44:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x2000000000000000}, 0x0) 18:44:13 executing program 3: 18:44:13 executing program 4: 18:44:13 executing program 0: 18:44:13 executing program 5: 18:44:13 executing program 1: 18:44:13 executing program 3: 18:44:13 executing program 0: 18:44:13 executing program 4: 18:44:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x3f00000000000000}, 0x0) 18:44:13 executing program 5: 18:44:13 executing program 1: 18:44:13 executing program 3: 18:44:13 executing program 0: 18:44:14 executing program 4: 18:44:14 executing program 5: 18:44:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4800000000000000}, 0x0) 18:44:14 executing program 1: 18:44:14 executing program 3: 18:44:14 executing program 0: 18:44:14 executing program 4: 18:44:14 executing program 5: [ 525.599078][T19440] validate_nla: 33 callbacks suppressed [ 525.599088][T19440] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:14 executing program 1: 18:44:14 executing program 3: [ 525.695884][T19444] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:14 executing program 0: 18:44:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x4c00000000000000}, 0x0) 18:44:14 executing program 4: 18:44:14 executing program 5: 18:44:14 executing program 1: 18:44:14 executing program 3: 18:44:14 executing program 0: [ 525.939881][T19453] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:14 executing program 4: 18:44:14 executing program 5: 18:44:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x5901000000000000}, 0x0) [ 525.987169][T19456] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:14 executing program 1: 18:44:14 executing program 3: 18:44:14 executing program 0: 18:44:14 executing program 4: [ 526.160166][T19462] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:14 executing program 5: 18:44:14 executing program 3: [ 526.230020][T19465] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:14 executing program 1: 18:44:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6000000000000000}, 0x0) 18:44:14 executing program 0: 18:44:14 executing program 4: 18:44:15 executing program 5: 18:44:15 executing program 3: 18:44:15 executing program 1: 18:44:15 executing program 0: 18:44:15 executing program 4: [ 526.508530][T19476] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 526.547541][T19479] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:15 executing program 5: 18:44:15 executing program 3: 18:44:15 executing program 1: 18:44:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6800000000000000}, 0x0) 18:44:15 executing program 4: 18:44:15 executing program 5: 18:44:15 executing program 0: 18:44:15 executing program 1: [ 526.803389][T19487] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:15 executing program 5: 18:44:15 executing program 3: [ 526.862833][T19491] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:15 executing program 4: 18:44:15 executing program 0: 18:44:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x6c00000000000000}, 0x0) 18:44:15 executing program 1: 18:44:15 executing program 5: 18:44:15 executing program 3: 18:44:15 executing program 0: 18:44:15 executing program 4: 18:44:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7400000000000000}, 0x0) 18:44:15 executing program 1: 18:44:15 executing program 5: 18:44:15 executing program 3: 18:44:15 executing program 0: 18:44:15 executing program 4: 18:44:15 executing program 1: 18:44:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x7a00000000000000}, 0x0) 18:44:16 executing program 5: 18:44:16 executing program 0: 18:44:16 executing program 4: 18:44:16 executing program 3: 18:44:16 executing program 1: 18:44:16 executing program 5: 18:44:16 executing program 0: 18:44:16 executing program 4: 18:44:16 executing program 3: 18:44:16 executing program 1: 18:44:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x9b0a000000000000}, 0x0) 18:44:16 executing program 5: 18:44:16 executing program 0: 18:44:16 executing program 1: 18:44:16 executing program 3: 18:44:16 executing program 4: 18:44:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x9effffff00000000}, 0x0) 18:44:16 executing program 5: 18:44:16 executing program 1: 18:44:16 executing program 4: 18:44:16 executing program 0: 18:44:16 executing program 3: 18:44:16 executing program 1: 18:44:16 executing program 4: 18:44:16 executing program 5: 18:44:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xc00e000000000000}, 0x0) 18:44:16 executing program 0: 18:44:16 executing program 3: 18:44:16 executing program 1: 18:44:16 executing program 4: 18:44:16 executing program 5: 18:44:17 executing program 3: 18:44:17 executing program 0: 18:44:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xf0ffffff00000000}, 0x0) 18:44:17 executing program 1: 18:44:17 executing program 4: 18:44:17 executing program 5: 18:44:17 executing program 3: 18:44:17 executing program 0: 18:44:17 executing program 4: 18:44:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xffffff7f00000000}, 0x0) 18:44:17 executing program 1: 18:44:17 executing program 5: 18:44:17 executing program 3: 18:44:17 executing program 0: 18:44:17 executing program 4: 18:44:17 executing program 5: 18:44:17 executing program 1: 18:44:17 executing program 3: 18:44:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0xfffffffffffff000}, 0x0) 18:44:17 executing program 0: 18:44:17 executing program 4: 18:44:17 executing program 1: 18:44:17 executing program 5: 18:44:17 executing program 3: 18:44:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x2}, 0x0) 18:44:17 executing program 0: 18:44:17 executing program 4: 18:44:17 executing program 1: 18:44:17 executing program 5: 18:44:17 executing program 3: 18:44:17 executing program 0: 18:44:17 executing program 4: 18:44:17 executing program 1: 18:44:17 executing program 5: 18:44:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x3}, 0x0) 18:44:18 executing program 3: 18:44:18 executing program 0: 18:44:18 executing program 4: 18:44:18 executing program 1: 18:44:18 executing program 5: 18:44:18 executing program 3: 18:44:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4}, 0x0) 18:44:18 executing program 0: 18:44:18 executing program 4: 18:44:18 executing program 1: 18:44:18 executing program 5: 18:44:18 executing program 3: 18:44:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x5}, 0x0) 18:44:18 executing program 0: 18:44:18 executing program 4: 18:44:18 executing program 1: 18:44:18 executing program 5: 18:44:18 executing program 3: 18:44:18 executing program 0: 18:44:18 executing program 4: 18:44:18 executing program 1: 18:44:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6}, 0x0) 18:44:18 executing program 5: 18:44:18 executing program 4: 18:44:18 executing program 3: 18:44:18 executing program 1: 18:44:18 executing program 0: 18:44:18 executing program 5: 18:44:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7}, 0x0) 18:44:18 executing program 4: 18:44:18 executing program 1: 18:44:18 executing program 0: 18:44:18 executing program 3: 18:44:18 executing program 4: 18:44:19 executing program 5: 18:44:19 executing program 1: 18:44:19 executing program 4: 18:44:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x9}, 0x0) 18:44:19 executing program 0: mlockall(0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 18:44:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x101240, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-vsock\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 18:44:19 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001fb2b9409ac00ac9a37b80", 0x11, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:44:19 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x3, 0x0, 0x10001) 18:44:19 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 18:44:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xa}, 0x0) 18:44:19 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:19 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0xe, &(0x7f0000000500)="b9ff0300600d698cb89e14f005051fffffff00004000632f77fb0514140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xb20c, 0xfffffffffffffe09}, 0x28) [ 530.742360][T19669] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. 18:44:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r0, 0x0, 0x0) 18:44:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf}, 0x0) 18:44:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r0, r1, 0x0) 18:44:19 executing program 3: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/64, 0x40}], 0x1) 18:44:20 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000019001fb2b9409ac00ac9a37b80", 0x11, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:44:20 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x401c5820, &(0x7f0000000000)=0x4) 18:44:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x48}, 0x0) 18:44:20 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009}) 18:44:20 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a0100000000000000000000000000090001"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 18:44:20 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002140)={@void, @val, @ipv6=@gre_packet={0x0, 0x6, "bc7d94", 0xf80, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "81cd44586548be63b79b144c491dac3d1e89060154af20b7904d2cc8716d8f959b67c117bf7bef54d3d3768d255d198e295d14f331c8e0333f52138c0aa2c1363713181273607e7f39049a36d5d9a58275bcbfb6f19358b1f34b18a67a3b8c071ed8201e0b5c375de88cef4651b1466e1184"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfb2) 18:44:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4c}, 0x0) 18:44:20 executing program 4: perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="08f2c5"], 0x0, 0x1b}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0) 18:44:20 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12080, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x200000d2) setregid(0xffffffffffffffff, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000006d80)={0x0, 0x0, "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", "800c372dcf49c12cdb502f4e7ebb62c0a788b71fdf0ba657ac407268195374d1441f853c7db2529aada6baa36df7f39d45bb4df8fa790de370bbfe42f018b4f401042c6f883ea22218b19e2e5b9519d12eacbb9b9348220510240b2f9dc72033d9d41efd60de1a15fb4da927decb8af8c4184acb6021bc26c42f72318eada7d27de935d2d09f7d46c32d5a0ce764877e0561ab0d33778c969880d6c472561b6553c650e7c3ad1b09f95cd68e736ed04b38805d4057ae092a03f35942978972243f27a66279bce8992cd5beca8317bfdbcc36b726b968dbfdf63b7ae941a95d47d0adcebb4e1947bfd06d1efc6a51589d31a81b7926344b59d6342a88588ec22c7aca77774e81484d52375b37eafdf5cdc83ccf5cc7be4d66507478c935b51c51b88c56ddea51d5e547f4a80bec5e6a9e1a62b81b6953087c1b642510144d8bc1b6a30edb80c10390f079b05d17b03556cbb6938902e5e06f15a45bcb45b4e790fcf20df02a36faf761367b8e1444c7a565075ca8d7fd1ef794308e8297531fd966be7b26c2d934dad4609abd50119e02784839a1cdaeb4378162eb17664a9f492b19f29460f1727758d3eb5a31fd20875eda5adefcecad57ceef51cb2cff9e09142294831611da5f64053255bfe8007e76db9aa979c1242daa98bd89efe967951944864a5544238b719e63825212df290bb9f12147fbdfdbb94ab1351c737a81ea68f1efb309c56619ba63c637f4c48bee1674e76c372e81be0d7df97be66f3cbf6e8f7c96ee62fd0dcab25e09da00852cd6415bfe2ae7ce17f7581718f884e7b016288e64075344a073a3f3cd33afae7049a66146cb18b35e270ad629c077b66303e363d3c411bcbf45f3da87a7758e18b412edfbd08da737d39e94e288150bc5ea43da5a2a98cc9e4fd3fc798af16595b3b7769fcfbda496d2a38bd60505a007a5b7c2df6fd1cde91f9046ad7f1bcdf6e6b586dc82f7829b640389215130f95b7cd7bbbd1602a9a477162f96b6f763215eedf4a4d2389f8ed736c00267ba7d67acae6a48f707e85a04a4a5ee76676cf7c552bac1e1dabc0c4763d6d96e7832f05ca0b4cf6304d9388fd925a3edbeb30247a8489ebc34c85a73fcfa4faa1903b29578eda354d15b577cd800113bc13b73779449e572ec593987b4f3076621d032fb918f7445e9b73c35f4c2687196b590cb904ec2b0612979cafbfb828f602a79e8c0f5e28f196bebb95ef4d31e8d40f23360ab22202b6231370e288fa3f82d1a6f91fd3fd0b6d59be0df8af34c27306d7d05ac2e63a6b331c35fe84a054ca708a38f3738a360ad1e462fba3c0b5bd1569a2ebaa7c0dfe67244ebd5fb951018bf03d6dfbdd77a58b816f317cde8f79500b825afb8dc0e96da33faad83b68f5e219d85b0ced8ad0cff299586d1a06a33c6a14d7c19fd2f894a461c0aef8dc09286ea59b3ac3358338ff8a294d3f9f5d60c4b3b9da17cbad3c8895a062442f7d3d696cbbf5a791c99cd8cc8bbe24f2890df4d3ef2afc7817bf31406c7e978d0db80f9c1ea8d09fd5df89d0a0706e7902c8a241cd98b5420a202ed6a1136e3f3801d81bb435888177ae3dc9032f0461a4e40edcf2c2c1110d77868b3dadb425b4dae82aff69a851e382de3961802902925045cca8f27269ecdcdf4f8f8827734d747960c6ab481a84626d4b72c1bf9b4bdf0af05d6025056bed4281c587ab4c2bed43afe027eb97d9e2c651e727d702429ccd2f0d1b04b7eb12c57abd59fe3f4bd7f439380d951a9ace5ae307338751b2512d813257f8b7d43dea2b46b8bd74071d87d632deceaca18a8da8dca8a0b5ab6783b703636a3b6f4979281c4e603f35153e406f9b4a3265f4adfb9f0bc1ca51932c48b6f919218aa70044dcb229dcd8f3c8eb887e9b6afdc8098b9f43e51e5c7a0d2b482cb68c50aa55c73e3767e1981892bd8eb3c8f2e5831dc130dfef596f5c8c6ca5a008c5071eedfd6e0dd0a4acde3b9db7380fd6c68535169c4159d7ecec443cb956887de58c0e1d79e7f23605c2096ec3fd510deda02c1b66069192dc4a3d7e5cf1b15ab211122d039bb7b242da5b1a4e8651bbc4277331def7707f4b5f135e62123a91baed63b8dae16759d3f985ecf30a166201a920be19e22c714623a85f0c2e38004da7045967a79851c24c8a1104bc8df389b890e5cf177e7a8970c07370beecbd13c5c93b089609a231aba4e1b2d0eb0fc6f0a8aa94fadde99f40a7894bfd5c2390093458d3ca74b7ac7b7b77459483e9f17d4068b1e6c8cd193308a0bd284183ff9239da2a982fee36bb1fa8560b6249b550247f047dc6c5526ccc4c87a68f763f6e28be23750f6c86c8c938524d31c251dfeb79bb92f059a2a1a22ab8b3a0279607d5a18533de578fec8852d599e66e5d7f5cae9de850f50eb803c707794f5b3e1c86dd2ed445d994a455e1a3d5732908efea255c180d6ca641a75ddd0f976f234ab2b0df832d355a337a12b80a641e248926d53903e3f9aa29b63eef6574034ee0e8a036415569e5bf846f0a5438bc62baf2871b1742d430dd3cd78129c1f9e0dc4a667d6a53aa67dd10a09b6c46b6afea17b062df984c3f0ecab20cc788d6128c6b5604933a19b18379df86e107f6f1faec3b9c6b1c2718ca0cadcf4e5c6827eba897117f5acfea91194b7f7bc4f31e8d4b0682db4ddb55ba72231bb046d1832e7830bd74bd0bea80bd2bd7c1d8e57add69b7c9e53f50ffa30170317b7ecc796224b82be56fd94d6b8d2a99542eadef9f8364f57a422ad18d17c08f9c164708a3369ad605c9e90d9165928ad07c24ee5bedc7bd1e2da5261110fb91bcaa7a47e6ed48232cbcaa3ae1df6e85ece66df468514ef2296b0a119e603379408859aa32a690bd2b49f9bbb3987a2c306361b37afc5eb6d7d421a4132dd150bbaefadd84d80622d2d985ae8be78b6de2e58611541e195dfde99ef98b2b72c2d60df1a41392f2a1ca397c35c4fbbdbc23299a7f334a85482104703d69e285fdcee1559e064453d324bcee7392eb016a4d41e620b8d167ae9fe9e440ab1489fa6c38e8b8e7c8439c8c7d7f76faac34f3f6c00dd23bd91d3b8b5e4c4c8219f92933f578feaf263d823eacebdc6b2a4714b5656049b9cad6aee4a2790c560c3a42eae81e401979bdfd156888e5f1257ddbe1e5db973d223b18accb2c55d9edfd390a46ab93071a014cbc8aa47def597338c37f0c5a236098eb23766f4bdd0c981236047c65ca09e682c080eaf699f145cd6faed5c906e144791e2058a1cf7a9ff36b8ba17e3a482b22fca178d5fa04d1b6d3d4b7eab7aa341e304f7fd755e9c48af54208d0c404edac8b2333d2639de38d36e4228acae8dc0685b3d395fbf3db232026787b67d380d69d8afa2fc1d8ecda368b5400809d6f7b1608edcbb07a6c3b3c4722b26b1f4ed2023a41b1515bbff64112d8c2d0982b2334d8bc8e41acb8fc8cccd28a4d91edb065a51fcfc65190da212af763dadac298ae65b5a5e918e995712d8d5be240ec45f9b48d1a15a18bb617ddf6ab9b2ffc894ae0be436814413e12c3690a1f6ddfbfc5a8a5bd0305c5cf11ffc188fcced3f68c0d7a578f6f8afeb79ff87e7eeb8c7e5afcc3cad8f795ec30e3e41be93f0f60d4fb52780e5a70e1e3a6b778ff91b74a43073dfa176205606f9079fd5c01f5494091d799f6f5968e614e1caec80fdd50dada7a51a6c46fa17153467132130717079534d232a7172405909e55216ba607407f7f872e66200b9681e9e377b68a68aacf2f1d5da33998892158e8e896c03244abb779b33bd84f10c25876d0847d3cbba123ccdcd41e85f432b6fc65d339e55ca10e717a0f58dc26274c15d4c2da0ec4d5d279b24c5f6fcb76c90da83ebde7558ce95880ea8336d7574e462d59ff7c2fddf5382eafabe7eef086de63decc8906ca67b8efad1837fe1095a4d33ca96b1e01e537c70c2ef9c48aee70bf2a4112a367e9e571d684306417d9a239458a6120d40929d7134a80c45f240d85a73c24c95de143ad7c2662c7bf4de4ab3aaa64157f5d07d804ab1fb70b2381076d4ea1d3f51fc6e37a3e6a0d6d98400f60eb00d73a26576e3ee695b5edc9008b18a5d7a7f28bdec3887476d2eb59953675d4b42799214f01ce599b973800242ba2e9870a23a529122f5a0d7d310c00931ca4f081c4731d5377c6dd9119932c8bbe31085fff73976ac061457a26bd81e531d9cfa93046fa75452289029ea2a3f955996789bf0594429f2685eb2f87599b07a9d3e03358a9d2ed15cf8dfa19b9656c2bf1a6719f5683dea5ed0ac7c367769f01f151b348a955a8999504d0aad336b0ed0f003dd1ab8967e65024bbfec95b71c2ff88690dc30e6b6c056df173bbf3159b7425bdee2ecb62d9525ecb0abf2d8220770587915967eeba492630b96d528afa601ccb2c600d9dc3bd0f7884104feb63cabf5e5c9f366e68e5f9f5dc072b8bef35fd9b050f5f042b1779a9f9b23f8a797ad30a6a9a29346a582d9a545936fdb027bb558338a1172ec92c01256c2620fc3a28e1bd9c1eb8bdbb4b89dfd410607d8fcafc1619d1c3294830d78ac54f82d5389d94d1b63e71e466e6087beeed8b392a4f18c77560a550b91aec821a6a83be4436b8cc63378c37bfb734086fe05b49ee7f97bd0be5bb3c2681e660ea4de2a8e792da4e6c2aa2549a1fc1c4293ab0745ea26034c2a8be74cfbc40e67fa600cfa1e4e2a783f7d8c7a1c6edc996f80959188c61c18ebd91a2335cac379115e291cb521af61cce675ab852d5997e9dea0b27317d3080f67016a859bbd59c99fbe6187201f2f36c2c978847fde9334a90fe07229933de65baaecd0dc3a8155ca5fd101a06b4ec129984ff76ada78f596baf42c8b45e08165f9732176b7f0f93d161d597185d6b4d4c26d5c44f923cc964c2c03f38a891064d12bb28e3c9ef34fb7144c9f1438458b858df25f9e805ede56a7d2b2963953ea2f8c7423f9db264c24f50b36057d933ca30e7e11b00bdcd540ac867dbd1ee929189a4f0c3449b8c954bcba2e2a51073bc88cd402502fca87efb08d71661a92c8bf7ceb0dd43a95b14701d8ee95aba17db37875e5ee4dfd53f785950fa76fa132e6eb2c15e3754ae91dd495bd50b946bc351202d6665ad0d31e4383ce17179fb64445580264d100d9fdb5cea7a26862980151b78f49f0c5d770af64643ad7c6b427cbc4436c744b50d807660206c4239c1b00cbe718f9b3ae81a12ce0825704efbfbd3ba716cc50179e2b4ca6a0db5e6c098cd62d0d8d18a9e418e90c3786af91109365e586fd2182d2f721e8bc7df0f7f331cb0f4eae56b24316edfcef0928873dfd2792fac279067503d8795c39cd9a90b1651a698c4b014ea0ab646a8f8e062836cf9167726dec98e23aa1577f0a"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000007d80)={0x0, 0x401}) [ 531.690495][T19712] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. 18:44:20 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0x8004510b, &(0x7f0000000140)) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x1}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 18:44:20 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12080, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x200000d2) setregid(0xffffffffffffffff, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000180)) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000006d80)={0x0, 0x0, "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", "800c372dcf49c12cdb502f4e7ebb62c0a788b71fdf0ba657ac407268195374d1441f853c7db2529aada6baa36df7f39d45bb4df8fa790de370bbfe42f018b4f401042c6f883ea22218b19e2e5b9519d12eacbb9b9348220510240b2f9dc72033d9d41efd60de1a15fb4da927decb8af8c4184acb6021bc26c42f72318eada7d27de935d2d09f7d46c32d5a0ce764877e0561ab0d33778c969880d6c472561b6553c650e7c3ad1b09f95cd68e736ed04b38805d4057ae092a03f35942978972243f27a66279bce8992cd5beca8317bfdbcc36b726b968dbfdf63b7ae941a95d47d0adcebb4e1947bfd06d1efc6a51589d31a81b7926344b59d6342a88588ec22c7aca77774e81484d52375b37eafdf5cdc83ccf5cc7be4d66507478c935b51c51b88c56ddea51d5e547f4a80bec5e6a9e1a62b81b6953087c1b642510144d8bc1b6a30edb80c10390f079b05d17b03556cbb6938902e5e06f15a45bcb45b4e790fcf20df02a36faf761367b8e1444c7a565075ca8d7fd1ef794308e8297531fd966be7b26c2d934dad4609abd50119e02784839a1cdaeb4378162eb17664a9f492b19f29460f1727758d3eb5a31fd20875eda5adefcecad57ceef51cb2cff9e09142294831611da5f64053255bfe8007e76db9aa979c1242daa98bd89efe967951944864a5544238b719e63825212df290bb9f12147fbdfdbb94ab1351c737a81ea68f1efb309c56619ba63c637f4c48bee1674e76c372e81be0d7df97be66f3cbf6e8f7c96ee62fd0dcab25e09da00852cd6415bfe2ae7ce17f7581718f884e7b016288e64075344a073a3f3cd33afae7049a66146cb18b35e270ad629c077b66303e363d3c411bcbf45f3da87a7758e18b412edfbd08da737d39e94e288150bc5ea43da5a2a98cc9e4fd3fc798af16595b3b7769fcfbda496d2a38bd60505a007a5b7c2df6fd1cde91f9046ad7f1bcdf6e6b586dc82f7829b640389215130f95b7cd7bbbd1602a9a477162f96b6f763215eedf4a4d2389f8ed736c00267ba7d67acae6a48f707e85a04a4a5ee76676cf7c552bac1e1dabc0c4763d6d96e7832f05ca0b4cf6304d9388fd925a3edbeb30247a8489ebc34c85a73fcfa4faa1903b29578eda354d15b577cd800113bc13b73779449e572ec593987b4f3076621d032fb918f7445e9b73c35f4c2687196b590cb904ec2b0612979cafbfb828f602a79e8c0f5e28f196bebb95ef4d31e8d40f23360ab22202b6231370e288fa3f82d1a6f91fd3fd0b6d59be0df8af34c27306d7d05ac2e63a6b331c35fe84a054ca708a38f3738a360ad1e462fba3c0b5bd1569a2ebaa7c0dfe67244ebd5fb951018bf03d6dfbdd77a58b816f317cde8f79500b825afb8dc0e96da33faad83b68f5e219d85b0ced8ad0cff299586d1a06a33c6a14d7c19fd2f894a461c0aef8dc09286ea59b3ac3358338ff8a294d3f9f5d60c4b3b9da17cbad3c8895a062442f7d3d696cbbf5a791c99cd8cc8bbe24f2890df4d3ef2afc7817bf31406c7e978d0db80f9c1ea8d09fd5df89d0a0706e7902c8a241cd98b5420a202ed6a1136e3f3801d81bb435888177ae3dc9032f0461a4e40edcf2c2c1110d77868b3dadb425b4dae82aff69a851e382de3961802902925045cca8f27269ecdcdf4f8f8827734d747960c6ab481a84626d4b72c1bf9b4bdf0af05d6025056bed4281c587ab4c2bed43afe027eb97d9e2c651e727d702429ccd2f0d1b04b7eb12c57abd59fe3f4bd7f439380d951a9ace5ae307338751b2512d813257f8b7d43dea2b46b8bd74071d87d632deceaca18a8da8dca8a0b5ab6783b703636a3b6f4979281c4e603f35153e406f9b4a3265f4adfb9f0bc1ca51932c48b6f919218aa70044dcb229dcd8f3c8eb887e9b6afdc8098b9f43e51e5c7a0d2b482cb68c50aa55c73e3767e1981892bd8eb3c8f2e5831dc130dfef596f5c8c6ca5a008c5071eedfd6e0dd0a4acde3b9db7380fd6c68535169c4159d7ecec443cb956887de58c0e1d79e7f23605c2096ec3fd510deda02c1b66069192dc4a3d7e5cf1b15ab211122d039bb7b242da5b1a4e8651bbc4277331def7707f4b5f135e62123a91baed63b8dae16759d3f985ecf30a166201a920be19e22c714623a85f0c2e38004da7045967a79851c24c8a1104bc8df389b890e5cf177e7a8970c07370beecbd13c5c93b089609a231aba4e1b2d0eb0fc6f0a8aa94fadde99f40a7894bfd5c2390093458d3ca74b7ac7b7b77459483e9f17d4068b1e6c8cd193308a0bd284183ff9239da2a982fee36bb1fa8560b6249b550247f047dc6c5526ccc4c87a68f763f6e28be23750f6c86c8c938524d31c251dfeb79bb92f059a2a1a22ab8b3a0279607d5a18533de578fec8852d599e66e5d7f5cae9de850f50eb803c707794f5b3e1c86dd2ed445d994a455e1a3d5732908efea255c180d6ca641a75ddd0f976f234ab2b0df832d355a337a12b80a641e248926d53903e3f9aa29b63eef6574034ee0e8a036415569e5bf846f0a5438bc62baf2871b1742d430dd3cd78129c1f9e0dc4a667d6a53aa67dd10a09b6c46b6afea17b062df984c3f0ecab20cc788d6128c6b5604933a19b18379df86e107f6f1faec3b9c6b1c2718ca0cadcf4e5c6827eba897117f5acfea91194b7f7bc4f31e8d4b0682db4ddb55ba72231bb046d1832e7830bd74bd0bea80bd2bd7c1d8e57add69b7c9e53f50ffa30170317b7ecc796224b82be56fd94d6b8d2a99542eadef9f8364f57a422ad18d17c08f9c164708a3369ad605c9e90d9165928ad07c24ee5bedc7bd1e2da5261110fb91bcaa7a47e6ed48232cbcaa3ae1df6e85ece66df468514ef2296b0a119e603379408859aa32a690bd2b49f9bbb3987a2c306361b37afc5eb6d7d421a4132dd150bbaefadd84d80622d2d985ae8be78b6de2e58611541e195dfde99ef98b2b72c2d60df1a41392f2a1ca397c35c4fbbdbc23299a7f334a85482104703d69e285fdcee1559e064453d324bcee7392eb016a4d41e620b8d167ae9fe9e440ab1489fa6c38e8b8e7c8439c8c7d7f76faac34f3f6c00dd23bd91d3b8b5e4c4c8219f92933f578feaf263d823eacebdc6b2a4714b5656049b9cad6aee4a2790c560c3a42eae81e401979bdfd156888e5f1257ddbe1e5db973d223b18accb2c55d9edfd390a46ab93071a014cbc8aa47def597338c37f0c5a236098eb23766f4bdd0c981236047c65ca09e682c080eaf699f145cd6faed5c906e144791e2058a1cf7a9ff36b8ba17e3a482b22fca178d5fa04d1b6d3d4b7eab7aa341e304f7fd755e9c48af54208d0c404edac8b2333d2639de38d36e4228acae8dc0685b3d395fbf3db232026787b67d380d69d8afa2fc1d8ecda368b5400809d6f7b1608edcbb07a6c3b3c4722b26b1f4ed2023a41b1515bbff64112d8c2d0982b2334d8bc8e41acb8fc8cccd28a4d91edb065a51fcfc65190da212af763dadac298ae65b5a5e918e995712d8d5be240ec45f9b48d1a15a18bb617ddf6ab9b2ffc894ae0be436814413e12c3690a1f6ddfbfc5a8a5bd0305c5cf11ffc188fcced3f68c0d7a578f6f8afeb79ff87e7eeb8c7e5afcc3cad8f795ec30e3e41be93f0f60d4fb52780e5a70e1e3a6b778ff91b74a43073dfa176205606f9079fd5c01f5494091d799f6f5968e614e1caec80fdd50dada7a51a6c46fa17153467132130717079534d232a7172405909e55216ba607407f7f872e66200b9681e9e377b68a68aacf2f1d5da33998892158e8e896c03244abb779b33bd84f10c25876d0847d3cbba123ccdcd41e85f432b6fc65d339e55ca10e717a0f58dc26274c15d4c2da0ec4d5d279b24c5f6fcb76c90da83ebde7558ce95880ea8336d7574e462d59ff7c2fddf5382eafabe7eef086de63decc8906ca67b8efad1837fe1095a4d33ca96b1e01e537c70c2ef9c48aee70bf2a4112a367e9e571d684306417d9a239458a6120d40929d7134a80c45f240d85a73c24c95de143ad7c2662c7bf4de4ab3aaa64157f5d07d804ab1fb70b2381076d4ea1d3f51fc6e37a3e6a0d6d98400f60eb00d73a26576e3ee695b5edc9008b18a5d7a7f28bdec3887476d2eb59953675d4b42799214f01ce599b973800242ba2e9870a23a529122f5a0d7d310c00931ca4f081c4731d5377c6dd9119932c8bbe31085fff73976ac061457a26bd81e531d9cfa93046fa75452289029ea2a3f955996789bf0594429f2685eb2f87599b07a9d3e03358a9d2ed15cf8dfa19b9656c2bf1a6719f5683dea5ed0ac7c367769f01f151b348a955a8999504d0aad336b0ed0f003dd1ab8967e65024bbfec95b71c2ff88690dc30e6b6c056df173bbf3159b7425bdee2ecb62d9525ecb0abf2d8220770587915967eeba492630b96d528afa601ccb2c600d9dc3bd0f7884104feb63cabf5e5c9f366e68e5f9f5dc072b8bef35fd9b050f5f042b1779a9f9b23f8a797ad30a6a9a29346a582d9a545936fdb027bb558338a1172ec92c01256c2620fc3a28e1bd9c1eb8bdbb4b89dfd410607d8fcafc1619d1c3294830d78ac54f82d5389d94d1b63e71e466e6087beeed8b392a4f18c77560a550b91aec821a6a83be4436b8cc63378c37bfb734086fe05b49ee7f97bd0be5bb3c2681e660ea4de2a8e792da4e6c2aa2549a1fc1c4293ab0745ea26034c2a8be74cfbc40e67fa600cfa1e4e2a783f7d8c7a1c6edc996f80959188c61c18ebd91a2335cac379115e291cb521af61cce675ab852d5997e9dea0b27317d3080f67016a859bbd59c99fbe6187201f2f36c2c978847fde9334a90fe07229933de65baaecd0dc3a8155ca5fd101a06b4ec129984ff76ada78f596baf42c8b45e08165f9732176b7f0f93d161d597185d6b4d4c26d5c44f923cc964c2c03f38a891064d12bb28e3c9ef34fb7144c9f1438458b858df25f9e805ede56a7d2b2963953ea2f8c7423f9db264c24f50b36057d933ca30e7e11b00bdcd540ac867dbd1ee929189a4f0c3449b8c954bcba2e2a51073bc88cd402502fca87efb08d71661a92c8bf7ceb0dd43a95b14701d8ee95aba17db37875e5ee4dfd53f785950fa76fa132e6eb2c15e3754ae91dd495bd50b946bc351202d6665ad0d31e4383ce17179fb64445580264d100d9fdb5cea7a26862980151b78f49f0c5d770af64643ad7c6b427cbc4436c744b50d807660206c4239c1b00cbe718f9b3ae81a12ce0825704efbfbd3ba716cc50179e2b4ca6a0db5e6c098cd62d0d8d18a9e418e90c3786af91109365e586fd2182d2f721e8bc7df0f7f331cb0f4eae56b24316edfcef0928873dfd2792fac279067503d8795c39cd9a90b1651a698c4b014ea0ab646a8f8e062836cf9167726dec98e23aa1577f0a"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000007d80)={0x0, 0x401}) 18:44:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)) 18:44:21 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 18:44:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:44:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') 18:44:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x60}, 0x0) 18:44:21 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) close(r0) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40286608, &(0x7f0000000000)=0x4) [ 532.561458][T19764] EXT4-fs warning (device sda1): verify_group_input:131: Cannot add at group 4 (only 16 groups) 18:44:21 executing program 1: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000400)) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000042) fcntl$dupfd(r1, 0x0, r2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r0, 0x16) 18:44:21 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:21 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x0, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0), 0x0}) 18:44:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc0045009, &(0x7f00000000c0)={0x0}) 18:44:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x68}, 0x0) 18:44:21 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18:44:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6c}, 0x0) 18:44:21 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x2}) 18:44:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setregid(0xffffffffffffffff, r1) 18:44:21 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01b440d3b7010400000000000000040004800900020073a60601000000000900010073797a3000000000080003400000000022000200b7"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 18:44:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100), 0x4) 18:44:21 executing program 1: r0 = inotify_init() poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) 18:44:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x74}, 0x0) 18:44:21 executing program 0: futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000000200), 0x0) 18:44:21 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) 18:44:21 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0xc, &(0x7f0000000000)={0x77359400}, 0x10) 18:44:22 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "bd416e", 0x10, 0x2c, 0x0, @remote, @mcast2, {[], {0x3a00, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 533.383228][T19819] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:44:22 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x84c, 0x2, [@TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xf8000000}}}]}]}}]}, 0x87c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:44:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7a}, 0x0) [ 533.497305][T19819] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:44:22 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/1179], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 18:44:22 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) [ 533.539316][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 18:44:22 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f00000035c0)=@deltaction={0x120, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4d, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x120}}, 0x0) 18:44:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae88, 0x0) [ 533.658195][T19841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:44:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf0}, 0x0) 18:44:22 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) [ 533.757826][T19841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 18:44:22 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) syz_mount_image$bfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:22 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r2, @ANYBLOB="7eb7ace8d217a85126b1eccdadf9face1fd3ecafae9734da9a0876766941ae775061490187813fd0499164c8b58a5e8352bee93ae96fc3a16e0558e16b59bf9e7e5c4ae0bf88724bd277e74e6ef90ed0b9a6d2cab22a49916fbcc8676dfbf3e1cdd40d84e0adbc8f7247d2846103b424730e26aa45bd5aa9d2f58a4e3ebb615ce1479a3ef56718b9c69130fe6e58be8df776c81b775ff3da8a615885c90baa1f24dfa95e7a1659de8aacb21850227e38029b5a5295da8a04b8fc0ca4ca49620d7eefefc1b9befbc253df25c0d92b5c3d096d6cecd229fc6fc1a3f697097b933bf78ff196b770b34ee53a417e5b2bea37388e7964c9bdb081ee34daf84daf0e1f51c13281c321e9cc"], 0x40}}, 0x0) 18:44:22 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) write$binfmt_misc(r1, 0x0, 0x4240a2a0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000000000103f1b0000", @ANYRES32=r6, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r5], 0x48}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@loopback, @empty, r5}, 0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x300e0, 0x0) [ 533.826926][T19857] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 533.866714][T19857] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. 18:44:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}]}, 0x38}}, 0x0) 18:44:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x159}, 0x0) [ 534.005066][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 18:44:22 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:22 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) 18:44:22 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="a010000030003deb0000000000000000000000008c100100881001000b000100706f6c6963650000581002800404020000040000030000000180000007000000080000000200000000000000070000000000000000000000070000000000000001040000fbffffff000000000010000001010000ffff000001000000070000000900000005000000030000000700000006000000020000001f0000007f00000000b6f6000500000004000000ff63ffff060000000800000005000000050000000700000080000000ff00000008000000060000000000000000000000020000001803000001000000000000000700000006000000080000000900000007000000020000000700000009000000ffffffff070000000104000000000080e71000001f0000000500000000000000ff000000ffffffff03000000070000006f2300000700000000000000ff07000009000000050000000100000005000000060000000000008081000000000000001f0000000000008006000000ff7f0000010000003f00000008000000000000000200000009000000400000006bca2d072f070000060000000900000008000000d1b20000ad0a00000600000006000000060000007f0000008100000047000000ff000000e6c1939affff000001000000f7050000ffff000009000000aa000000180200000700000001800000a7230000000000000400000007000000010000000200000006000000f7ffffff02000000ff0100002d000000060000007f00000009000000a00b000004000000feffffff3f000000040000000100000004000000780a00003f000000d65900000700000000040000dc7500000900000083000000734f000000000000050000000100000000010000070000001700000007000000290000008000000007000000000800008ccc000007000000ff0f00000010000003000000030000000300000006000000400000000402000079d60000ff7f0000090000001f000000ffffff7f08000000000000006b0000001f00000006000000080000000200000007000000a50500008d88000006000000010000000300000025b500000600000000040000ffffff7f0400000009000000020000000000008100000000ff7f0000ffffffff04000000070000003000000000010000ff07000001000000040000000400000000880000000001000800000004000000200000000300000005000000000100000300000008000000080000000300000000020000070000000300000004000000f7ffffff05000000b300000005000000070000000700000082c6000008000000050000000200000001000000000000000080000041a50000020000004600ff7106000000c300000003000000050000000300000008000000070000008100000067ee0000080000009f7b7e2a01010000a30e0000d5800000070000000800000040000000030090dff0fd5743c9d2000008000400000000003c000100f9ffffff0400000008000080010206000400ff030600000000013f00ffff056f"], 0x10a0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:44:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), 0x4) sendmsg$xdp(r0, &(0x7f0000000b40)={&(0x7f0000000880)={0x2, 0x2}, 0x10, 0x0}, 0x0) 18:44:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:23 executing program 5: syz_mount_image$msdos(&(0x7f0000000240)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xffffffff}}]}) 18:44:23 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) read$char_raw(r0, 0x0, 0x0) 18:44:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x300}, 0x0) 18:44:23 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xba}, @timestamp={0x44, 0x4}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) 18:44:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:23 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f00000003c0)={0x9, 0x1, "14"}, 0x2000000) socket$netlink(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) 18:44:23 executing program 4: r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000032) fcntl$notify(r0, 0x10, 0x0) 18:44:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x500}, 0x0) 18:44:23 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r2, @ANYBLOB="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"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000200)={'syztnl0\x00', 0x0}) 18:44:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r2, &(0x7f0000000080), 0x1c) shutdown(r2, 0x1) 18:44:23 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000100)='reiserfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@resize={'resize', 0x3d, 0x9}}, {@expose_privroot='expose_privroot'}, {@barrier_none='barrier=none'}, {@nouser_xattr='nouser_xattr'}, {@errors_continue='errors=continue'}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) 18:44:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x120) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 18:44:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x600}, 0x0) [ 535.216918][T19936] REISERFS warning (device loop4): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 535.216918][T19936] 18:44:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) [ 535.284551][T19936] REISERFS warning (device loop4): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 535.284551][T19936] 18:44:23 executing program 1: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x8, 0x20000000001, 'P'}, 0x290020) 18:44:23 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'macvtap0\x00', @multicast}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x4300, &(0x7f0000000280)="b95b03b700030700009e40f088471fffffe100004000638477fbac14143fe0004301c699da153f03a0e6e380f60104f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x10) recvmsg(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002740)=""/123, 0x7b}, {&(0x7f00000027c0)=""/226, 0xe2}, {0x0}, {&(0x7f00000029c0)=""/243, 0xf3}, {&(0x7f0000002ac0)=""/10, 0xa}], 0x5, &(0x7f0000002b80)=""/4096, 0x1000}, 0x2000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x5, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 18:44:24 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x309, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 18:44:24 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01b440d3b7010400000000000000040004800900020073a60601000000000900010073797a3000000000080003400000000022000200b76312c411"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 18:44:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x700}, 0x0) 18:44:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x93fc7}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x1, 0x0, @pic={0x0, 0x33, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:44:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x900}, 0x0) 18:44:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305839, &(0x7f0000000040)) 18:44:24 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 18:44:24 executing program 5: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "bd416e", 0x10, 0x3b, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 18:44:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:24 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="311dd5965231", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote, @local}, {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 18:44:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xa00}, 0x0) 18:44:24 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000001280)=ANY=[]) 18:44:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x8}) 18:44:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xa9b}, 0x0) 18:44:24 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) close_range(r0, 0xffffffffffffffff, 0x0) [ 536.167514][T20020] XFS (loop4): Invalid superblock magic number 18:44:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:25 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)) 18:44:25 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc0105303, &(0x7f00000001c0)={0x7ff, 0x0, 0x0, 'queue1\x00'}) 18:44:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xec0}, 0x0) 18:44:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x1}}) close(r0) 18:44:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) [ 536.508781][T20020] XFS (loop4): Invalid superblock magic number 18:44:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 18:44:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, 0x0) 18:44:25 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="8169739e60ec151a5daee28459ed5c8dbe563cb635da71d3e192adb9fec4026887676503897a84a6c1e1d16d52208c3e3477f832608b03becf534e92bf4b4299fb2e24dcdc7a0ace4668bffe93873eebb6c505aec9de9c921b4424e2d62da6607a902dc156c30455e2c7b24f1a1e463852ba76566dc2f17232ce6148774b3345d4d13a280f3197dfdc5e9dbf05859a7c908dd8a60d8aaf767b7e73eb32ba", 0x9e, 0x3}, {0x0, 0x0, 0x101}], 0x0, &(0x7f0000001280)=ANY=[]) 18:44:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf00}, 0x0) 18:44:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:44:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x3, 0x0, 0x0) 18:44:25 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x2000}, 0x0) 18:44:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:25 executing program 1: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01b440d3b7010400000000000000040004800900020073a60601000000000900010073797a3000000000080003400000000022000200b763"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 18:44:25 executing program 5: creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x400017e) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000001c0)='./bus\x00', 0x40000000) creat(&(0x7f0000000080)='./bus\x00', 0x0) [ 537.434520][T20121] __nla_validate_parse: 14 callbacks suppressed [ 537.434531][T20121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.474936][T20121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.488689][T20123] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 18:44:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x81420000a77, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x78) 18:44:26 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) sendmmsg$sock(r1, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000039c0)="17", 0x1}], 0x1}}], 0x2, 0x0) 18:44:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x3f00}, 0x0) 18:44:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:26 executing program 5: clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 18:44:26 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) dup3(r0, r1, 0x0) 18:44:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)) 18:44:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4800}, 0x0) 18:44:26 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 18:44:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) 18:44:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4c00}, 0x0) 18:44:26 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 18:44:26 executing program 5: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1, 0xa0002) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x80009, 0x9}) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x20000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$KDGETLED(r2, 0x4b31, &(0x7f00000001c0)) fsync(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x1000400200) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0xd0000000}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:44:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '\v'}, 0x0) 18:44:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x5901}, 0x0) 18:44:27 executing program 1: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000640)={[{@dir_umask={'dir_umask'}}]}) 18:44:27 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, 0x0, 0x0) 18:44:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') write$P9_RSTATFS(r0, 0x0, 0x0) 18:44:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_delete(0x0) 18:44:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6000}, 0x0) 18:44:27 executing program 1: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{0x0, 0x0, 0xdad}], 0x0, &(0x7f0000000900)={[{@spectator='spectator'}, {@acl='acl'}, {@nosuiddir='nosuiddir'}, {@ignore_local_fs='ignore_local_fs'}, {@errors_withdraw='errors=withdraw'}]}) 18:44:27 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) poll(0x0, 0x0, 0xfffffffffffffff8) shutdown(r2, 0x2) 18:44:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000002c0)="f6", 0x1, 0xfffffffffffffffb) keyctl$link(0x8, r2, r3) 18:44:27 executing program 1: r0 = socket(0x2, 0x3, 0x100000001) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x340, 0x0, 0x210, 0x140, 0x0, 0x210, 0x2a8, 0x2a8, 0x280, 0x2a8, 0x2a8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3, @local, @broadcast, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x3, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) 18:44:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:27 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f00000c2000/0x4000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) read$FUSE(r0, 0x0, 0x0) 18:44:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6800}, 0x0) [ 538.912399][T20217] x_tables: duplicate underflow at hook 1 [ 538.951950][T20217] x_tables: duplicate underflow at hook 1 18:44:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000100)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xf4203de77069a87c, &(0x7f0000001040)={0x2, 0x4e23, @empty}, 0x2b) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000035c0)=""/4112, 0x1010}], 0x1}, 0x40000104) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="05e7099f5d1780768fca61fa3e79de0841abd704254b76794d3c003dc219c204565715509920fffaf56526afd1c771cb78e09e29bb6e3e595fca010af4be4cef6a63d1fba57b9835a999f90c531a4b77ba97b4132b04feccd231af58ea1bfd0925e3b810", 0x64}, {&(0x7f00000001c0)="aa71ff3de9790c21767b389fcecc17b0c4ea5bfabacdf70cb689b7e9a4b3becdb538a7bdd89288ae55085ce560c71724828e2b227be2e272f9ba59a7750787b6e1ab269ecc9b07b6c9dc2b273fd27f1102bf57f63297e71ce2bb058f17b426c9e7b3daf058c703", 0x67}, {&(0x7f0000000480)="14dda8b19d3d9fc1acc418049139c7", 0xf}, {&(0x7f00000004c0)="0f629301076e41b7f11d6ac975e6ecf9c5adab24520563e6368a574dfe8866fb351cda5329f78f665e6de54e96c03c6ed00766d76a506ec421e4f51a319b0cb01973c335684c9442a584965354e6c7c6eb804155fc9563f7a6b61ea3622fd52b3c2b2fe0968c80480f89a61520765e5eda6ad44aa919790e4fbd96dc30365b9546e3dbf3670d010203c3d8cf0f2bf09a8b5363e633b275cfd1064689f5be7285f7f2e0181d3223dfa75d94b6ece4a9e793d16b3bc3012d9ec2293ab648a8229f849dfb3433db0da19af514c4ce", 0xcd}, {&(0x7f0000001080)="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", 0x480}], 0x5}}], 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shutdown(r0, 0x1) 18:44:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6c00}, 0x0) 18:44:27 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x7}, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0xfff}], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xfffffffffffffd5f, 0x40010, 0x0, 0x0) 18:44:27 executing program 0: 18:44:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7400}, 0x0) 18:44:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e000902000000000000000007"], 0x28}}, 0x0) 18:44:28 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'btrfs.', 'system.posix_acl_default\x00'}) 18:44:28 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:28 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 18:44:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7a00}, 0x0) [ 539.826291][T20260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x9b0a}, 0x0) 18:44:28 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) [ 539.876563][T20263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.932875][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 539.982850][T20260] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) 18:44:28 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000011c0)={&(0x7f00000c2000/0x4000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000de000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) write$P9_RFSYNC(r0, 0x0, 0x0) 18:44:28 executing program 5: r0 = socket(0x2, 0x3, 0x100000001) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x340, 0x0, 0x210, 0x140, 0x0, 0x210, 0x2a8, 0x2a8, 0x280, 0x2a8, 0x2a8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3, @local, @broadcast, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x3, @local}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) 18:44:28 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xc00e}, 0x0) [ 540.253728][T20293] x_tables: duplicate underflow at hook 1 [ 540.280824][ T28] audit: type=1804 audit(1598899468.860:2983): pid=20291 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir954770441/syzkaller.atl1j1/600/bus" dev="sda1" ino=16378 res=1 errno=0 [ 540.322507][T20293] x_tables: duplicate underflow at hook 1 18:44:29 executing program 4: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000690, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) [ 540.380216][ T28] audit: type=1804 audit(1598899468.920:2984): pid=20291 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir954770441/syzkaller.atl1j1/600/bus" dev="sda1" ino=16378 res=1 errno=0 18:44:29 executing program 0: poll(0x0, 0x0, 0x8) 18:44:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x300, 0x3665b74001010000, 0x0) dup2(r0, r1) 18:44:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf000}, 0x0) 18:44:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 18:44:29 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) 18:44:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) 18:44:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:29 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x63) 18:44:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000280)=""/247, 0xf7) 18:44:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x34000}, 0x0) 18:44:29 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = memfd_create(&(0x7f00000000c0)='\xe58\xb9C;`\xb6p\x98\xcf\x1dT\b$$+\x10\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000140)="f1", 0x1}], 0x1, 0x18180b, 0x0) sendfile(r3, r6, 0x0, 0x200000f) sendfile(r1, r1, 0x0, 0x80000003) 18:44:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x6}, 0x0) 18:44:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000001010102"], 0x24}}, 0x0) 18:44:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x400300}, 0x0) 18:44:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=[{0x10}, {0x10}], 0x20}, 0x0) 18:44:29 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x3ff) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 18:44:30 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='> O'], 0x191) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 541.467097][T20363] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 18:44:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xe0ffff}, 0x0) 18:44:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf0ffff}, 0x0) 18:44:30 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x6fff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 18:44:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000000)=""/71, 0x47}, {&(0x7f0000000100)=""/137, 0x89}], 0x3, 0x0, 0x0) 18:44:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x1000000}, 0x0) 18:44:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:30 executing program 0: r0 = semget$private(0x0, 0x2, 0x0) semctl$GETZCNT(r0, 0x3, 0xf, 0x0) 18:44:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:30 executing program 4: 18:44:30 executing program 5: 18:44:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x2000000}, 0x0) 18:44:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%n'}, 0x30) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/247, 0xf7) getdents64(r0, &(0x7f0000000540)=""/188, 0x724) 18:44:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x1, 0x0) 18:44:31 executing program 5: creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000012c0), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 18:44:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x3000000}, 0x0) 18:44:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:44:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:31 executing program 0: 18:44:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4000000}, 0x0) 18:44:31 executing program 4: 18:44:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:44:31 executing program 0: 18:44:31 executing program 4: 18:44:31 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x5000000}, 0x0) 18:44:32 executing program 5: 18:44:32 executing program 0: 18:44:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:44:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6000000}, 0x0) 18:44:32 executing program 4: 18:44:32 executing program 0: 18:44:32 executing program 4: 18:44:32 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7000000}, 0x0) 18:44:32 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:32 executing program 5: 18:44:32 executing program 0: 18:44:32 executing program 4: 18:44:32 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x9000000}, 0x0) 18:44:32 executing program 0: 18:44:32 executing program 5: 18:44:32 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:32 executing program 4: 18:44:32 executing program 0: 18:44:32 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xa000000}, 0x0) 18:44:32 executing program 5: 18:44:32 executing program 0: 18:44:32 executing program 4: 18:44:32 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:32 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf000000}, 0x0) 18:44:32 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:32 executing program 5: 18:44:32 executing program 0: 18:44:32 executing program 4: 18:44:32 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:33 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x20000000}, 0x0) 18:44:33 executing program 0: 18:44:33 executing program 5: 18:44:33 executing program 4: 18:44:33 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:33 executing program 0: 18:44:33 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:33 executing program 4: 18:44:33 executing program 5: 18:44:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x3f000000}, 0x0) 18:44:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:33 executing program 0: 18:44:33 executing program 4: 18:44:33 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x48000000}, 0x0) 18:44:33 executing program 5: 18:44:33 executing program 5: 18:44:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:33 executing program 0: 18:44:33 executing program 4: 18:44:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4c000000}, 0x0) 18:44:33 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:33 executing program 4: 18:44:33 executing program 5: 18:44:33 executing program 0: 18:44:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x59010000}, 0x0) 18:44:33 executing program 5: 18:44:33 executing program 4: 18:44:33 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:33 executing program 0: 18:44:34 executing program 4: 18:44:34 executing program 5: 18:44:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x60000000}, 0x0) 18:44:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:34 executing program 0: 18:44:34 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x68000000}, 0x0) 18:44:34 executing program 4: 18:44:34 executing program 5: 18:44:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r0 = dup(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:34 executing program 0: 18:44:34 executing program 4: 18:44:34 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6c000000}, 0x0) 18:44:34 executing program 5: 18:44:34 executing program 0: 18:44:34 executing program 4: 18:44:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:34 executing program 5: 18:44:34 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x74000000}, 0x0) 18:44:34 executing program 0: 18:44:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:34 executing program 4: 18:44:34 executing program 0: 18:44:34 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:34 executing program 5: 18:44:34 executing program 4: 18:44:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000000700f10001"]}) 18:44:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7a000000}, 0x0) 18:44:34 executing program 0: 18:44:34 executing program 5: 18:44:35 executing program 0: 18:44:35 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 18:44:35 executing program 4: 18:44:35 executing program 5: 18:44:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x9b0a0000}, 0x0) 18:44:35 executing program 0: 18:44:35 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:35 executing program 4: 18:44:35 executing program 5: 18:44:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 18:44:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x9effffff}, 0x0) 18:44:35 executing program 0: 18:44:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) 18:44:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xc00e0000}, 0x0) 18:44:35 executing program 4: 18:44:35 executing program 5: 18:44:35 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:35 executing program 0: 18:44:35 executing program 5: 18:44:35 executing program 4: 18:44:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) 18:44:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf0ffffff}, 0x0) 18:44:35 executing program 0: 18:44:35 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x0, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:35 executing program 5: 18:44:35 executing program 4: 18:44:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) 18:44:35 executing program 5: 18:44:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xffffe000}, 0x0) 18:44:35 executing program 0: 18:44:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) 18:44:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x0, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:36 executing program 4: 18:44:36 executing program 5: 18:44:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xfffff000}, 0x0) 18:44:36 executing program 0: 18:44:36 executing program 5: 18:44:36 executing program 4: 18:44:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[]}) 18:44:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x0, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:36 executing program 0: 18:44:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xffffff7f}, 0x0) 18:44:36 executing program 5: 18:44:36 executing program 4: 18:44:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[]}) 18:44:36 executing program 0: 18:44:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:36 executing program 5: 18:44:36 executing program 4: 18:44:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xffffff9e}, 0x0) 18:44:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[]}) 18:44:36 executing program 0: 18:44:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:36 executing program 5: 18:44:36 executing program 4: 18:44:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB]}) 18:44:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xfffffff0}, 0x0) 18:44:36 executing program 0: 18:44:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:36 executing program 5: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x10a0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:44:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x85, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 18:44:36 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x4b, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c6976"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 18:44:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB]}) 18:44:37 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 548.466606][T20732] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 548.487829][T20732] netlink: 3092 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8004700d, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a000000ebf58671b86dc22d454aac1d5b"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 548.530240][T20739] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 548.572717][T20739] netlink: 3092 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$sock(r1, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140), 0x1000000}, {&(0x7f0000000200)='Z', 0x1}, {&(0x7f0000000280)='d', 0x1}], 0x3}}], 0x1, 0x0) 18:44:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB]}) 18:44:37 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:37 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x53, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 18:44:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xe0ffff00000000}, 0x0) 18:44:37 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffc7b, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005", 0x2b}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) socket$kcm(0x2b, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f00)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000200), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001580)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, &(0x7f00000005c0)=0x400000000) bpf$PROG_LOAD(0x5, &(0x7f00000123c0)={0x10, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200}, [@alu={0x7, 0x1, 0xc, 0x3, 0x1d, 0xfffffffffffffff4, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x0, 0x3, 0x0, 0x3, 0xa, 0x0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5125}]}, &(0x7f00000008c0)='syzkaller\x00', 0xff, 0x1e, &(0x7f0000000900)=""/30, 0x41100, 0x8, [], 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000012340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000012380)={0x5, 0x9, 0x3}, 0x10}, 0x78) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x43) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x9, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x81}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x0, 0x7, 0x3, 0x6, 0xfffffffffffffff0}, @exit, @call={0x85, 0x0, 0x0, 0x36}, @ldst={0x0, 0x3, 0x0, 0x6, 0xb, 0x4, 0x8}]}, &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, [], 0x0, 0x1c, r1, 0x8, &(0x7f0000000dc0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000e00)={0x0, 0x5, 0x6, 0x1}, 0x10}, 0x78) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000ec0)={r1, r1, 0x4, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xc, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x2, @multicast, 'virt_wifi0\x00'}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000540)="4fa90bf4f36626051124086de0181749d2f2d3dea646bc29e852c9c7c3225e34b53d7fc672634f038fef2b97d6834fec481a06bb14564538d3aa5a49ee082609af25f179f344991e0d210839e7350515399dbbc87efe482bd5a392c96a294947aa60c14fc832e7998d61d3025fea0f4c62f65f06d124f3a0b8ed5c23132694f4d16ae505bdb4c28e33f34cbf98f045dfc8e5d605c8a1413cae294d44ec574932f1a9bdf8eb98cc75230bb6a7224f9d1494bef51f7c7b02a81eb34c4ccb8eb54315c5c7a72bb8a1d40304a0c25a11a235bd4311828dc0da01d3db649844587b5c890d102cfd5ff1ac860d9e5dc73e95cf298ef3c803", 0xf5}, {&(0x7f0000000280)="f1f7e6037ee0f00a73a11d99281ae699f0f8ee69b948dd2479faa2e43855962bf2f1f2c6b9e2", 0x26}], 0x2, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x2d8}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x100002, 0x0) 18:44:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b000000020000"]}) 18:44:37 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 18:44:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8004700d, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a000000ebf58671b86dc22d454aac1d5b"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';']}) 18:44:37 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@private}, {@in6=@ipv4={[0xfffffff0], [], @multicast1}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x184}}, 0x0) 18:44:38 executing program 0: r0 = io_uring_setup(0x4cd1, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) shmat(0x0, &(0x7f0000400000/0x2000)=nil, 0x0) 18:44:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';']}) 18:44:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x100000000000000}, 0x0) 18:44:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) 18:44:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x200000000000000}, 0x0) 18:44:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';']}) 18:44:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$tun(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a000000ebf58671b86dc22d45"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:38 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x84, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 18:44:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=ANY=[], 0x1d0}}, 0x400c890) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x0, 0x0, 0x0) 18:44:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';\x00\x00\x00']}) 18:44:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x300000000000000}, 0x0) 18:44:38 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r0 = gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) tkill(r0, 0x1000000000016) 18:44:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';\x00\x00\x00']}) 18:44:38 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x400000000000000}, 0x0) 18:44:39 executing program 0: ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x8e, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3ccc"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 18:44:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:39 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000ffffffffff0086dd60bd0000000000000000bbff020000000000000000000000000001"], 0x0) 18:44:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';\x00\x00\x00']}) 18:44:39 executing program 5: syz_emit_ethernet(0x42, &(0x7f0000000080)={@link_local={0x3}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0x0], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "bd416e", 0xc, 0x2c, 0x0, @private1, @private0, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 18:44:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x500000000000000}, 0x0) 18:44:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:39 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:44:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b0000000200"]}) 18:44:39 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x2832, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:44:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x600000000000000}, 0x0) 18:44:39 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x58, &(0x7f0000000500)="c4c691019919da078a0098d1e0a593b040f762910000000000000022addee07bee0d6333b5cacd893169b618322ff6602122511253508b5a4496728c2a46e1bc340e29b9ab9b71531c697624483004c63e2836283e350808"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x17) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = getpid() tkill(r3, 0x2f) 18:44:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:39 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x7fffffffffffffff) 18:44:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val, @void, @eth={@random="2dcf67da2956", @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x0, 0x0, @local, @mcast2}}}}}, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a000000ebf58671b86dc22d454aac1d5b"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x700000000000000}, 0x0) 18:44:40 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000916000/0x4000)=nil, 0x4000) 18:44:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';\x00\x00\x00']}) 18:44:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a000000eb"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';\x00\x00\x00']}) 18:44:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x900000000000000}, 0x0) 18:44:40 executing program 0: r0 = socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000040)=@xdp={0x2c, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000001cc0)=ANY=[], 0x1310}, 0x0) 18:44:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x0, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xa00000000000000}, 0x0) 18:44:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'macvtap0\x00', @multicast}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x4300, &(0x7f0000000280)="b95b03b700030700009e40f088471fffffe100004000638477fbac14143fe0004301c699da153ffda0e6e380f60104f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x10) recvmsg(r0, &(0x7f0000003b80)={&(0x7f00000026c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002740)=""/123, 0x7b}, {&(0x7f00000027c0)=""/226, 0xe2}, {&(0x7f00000028c0)=""/81, 0x51}, {&(0x7f0000002940)=""/105, 0x69}, {&(0x7f00000029c0)=""/243, 0xf3}, {&(0x7f0000002ac0)=""/10, 0xa}], 0x6, &(0x7f0000002b80)=""/4096, 0x1000}, 0x2000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000003bc0), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003e80)={r0, 0xc0, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c80)=0x9, 0x0, 0x0, 0x0, &(0x7f0000003cc0)={0x7, 0x3}, 0x0, 0x0, &(0x7f0000003d00)={0x5, 0x0, 0x100, 0x2}, &(0x7f0000003d40)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003d80)=0x1}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000dc0)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x19, 0x3, &(0x7f0000000c80)=@raw=[@jmp={0x5, 0x0, 0xd, 0x6, 0x3, 0x100}, @generic={0x0, 0x8, 0x6, 0x4, 0x9}, @ldst={0x2, 0x2, 0x6, 0x0, 0x9, 0xfffffffffffffff8, 0xfffffffffffffff0}], &(0x7f0000000cc0)='GPL\x00', 0xffffffff, 0x1f, &(0x7f0000000d00)=""/31, 0x41000, 0x6, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0xd, 0x61, 0x7fff}, 0x10, 0x0, r3}, 0x78) 18:44:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val, @void, @eth={@random="2dcf67da2956", @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "163dac", 0x0, 0x0, 0x0, @local, @mcast2}}}}}, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000480)=ANY=[@ANYBLOB="03000000000020c3067d3100020000090400000000000000f6ffffff0000000001000000000000fffffffffffffff3100000f2ffff0700000a000000ebf58671b86dc22d454aac1d5b"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x20000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f62, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:44:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB=';\x00\x00\x00']}) 18:44:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbf, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x0, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf00000000000000}, 0x0) 18:44:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x1b, &(0x7f0000000040)=r0, 0x52d) 18:44:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x0, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:41 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000080000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a01b440d3b7010400000000000000040004800900020073a60601000000000900010073797a3000000000080003400000000022000200b76312c4110dd9b1"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 18:44:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x2000000000000000}, 0x0) 18:44:41 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x0, @local}}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8918, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @dev}}) 18:44:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbf, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:41 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 18:44:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) [ 552.626971][T20997] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x3f00000000000000}, 0x0) [ 552.732755][T20997] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:41 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB='pqnoenforce,grpquota']) [ 552.777835][T21014] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 18:44:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:41 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000140)={0x1}, 0x18) 18:44:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbf, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4800000000000000}, 0x0) [ 553.024806][T21019] XFS (loop4): Invalid superblock magic number 18:44:41 executing program 1: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/121) [ 553.151723][T21041] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 18:44:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 18:44:41 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:41 executing program 5: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x200408c4) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x80040200, &(0x7f00000025c0)=[{&(0x7f00000000c0)="b8", 0x7ffff000}], 0x1, 0x0, 0x0, 0x1100}, 0x6d70) 18:44:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x5901000000000000}, 0x0) [ 553.306125][T21019] XFS (loop4): Invalid superblock magic number 18:44:42 executing program 1: syz_mount_image$iso9660(&(0x7f0000000740)='iso9660\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000001900), 0x0, &(0x7f0000001980)={[{@overriderock='overriderockperm'}]}) 18:44:42 executing program 5: 18:44:42 executing program 4: 18:44:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:42 executing program 5: 18:44:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbf, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) getpid() write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) 18:44:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6000000000000000}, 0x0) 18:44:42 executing program 1: 18:44:42 executing program 4: 18:44:42 executing program 5: 18:44:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:42 executing program 1: 18:44:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6800000000000000}, 0x0) 18:44:42 executing program 4: 18:44:42 executing program 5: 18:44:42 executing program 1: 18:44:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:42 executing program 0: 18:44:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 18:44:42 executing program 5: 18:44:42 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = dup2(r1, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) rename(0x0, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000002b8, 0x0) 18:44:42 executing program 1: 18:44:42 executing program 0: 18:44:42 executing program 5: 18:44:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7400000000000000}, 0x0) [ 554.226684][T21102] x_tables: duplicate underflow at hook 2 18:44:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:42 executing program 0: 18:44:42 executing program 1: 18:44:42 executing program 5: 18:44:43 executing program 1: 18:44:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 18:44:43 executing program 5: [ 554.755049][T21102] x_tables: duplicate underflow at hook 2 18:44:43 executing program 4: 18:44:43 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:43 executing program 0: 18:44:43 executing program 1: 18:44:43 executing program 5: 18:44:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x9b0a000000000000}, 0x0) 18:44:43 executing program 5: 18:44:43 executing program 0: 18:44:43 executing program 1: 18:44:43 executing program 4: 18:44:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 18:44:43 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:43 executing program 5: 18:44:43 executing program 1: 18:44:43 executing program 0: 18:44:43 executing program 4: 18:44:44 executing program 1: 18:44:44 executing program 5: 18:44:44 executing program 0: 18:44:44 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 18:44:44 executing program 4: 18:44:44 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket$inet(0xa, 0x801, 0x84) 18:44:44 executing program 1: r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000640)={'ip6tnl0\x00', 0x0}) 18:44:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0xa0ab68a57701347c}) 18:44:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 18:44:44 executing program 0: 18:44:44 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:44 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:44 executing program 5: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:44 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 18:44:44 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:44 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r5}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:44 executing program 1: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 18:44:44 executing program 5: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:44 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:44 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:44 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x0) 18:44:45 executing program 1: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x42cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) [ 556.589410][T21233] validate_nla: 16 callbacks suppressed [ 556.589421][T21233] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:45 executing program 5: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:45 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:45 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 556.747351][T21244] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:45 executing program 1 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x2}, 0x0) 18:44:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:45 executing program 5 (fault-call:2 fault-nth:0): bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 556.997166][T21260] FAULT_INJECTION: forcing a failure. [ 556.997166][T21260] name failslab, interval 1, probability 0, space 0, times 0 [ 557.060295][T21264] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 557.089229][T21260] CPU: 1 PID: 21260 Comm: syz-executor.1 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 557.099173][T21260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.109243][T21260] Call Trace: [ 557.112557][T21260] dump_stack+0x18f/0x20d [ 557.116914][T21260] should_fail.cold+0x5/0x14 [ 557.121663][T21260] ? tomoyo_realpath_from_path+0xc3/0x620 [ 557.127408][T21260] should_failslab+0x5/0xf [ 557.131847][T21260] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 557.137938][T21260] __kmalloc+0x6f/0x320 [ 557.141690][T21267] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 557.142105][T21260] tomoyo_realpath_from_path+0xc3/0x620 [ 557.155715][T21260] ? tomoyo_profile+0x42/0x50 [ 557.160421][T21260] tomoyo_path_number_perm+0x1cb/0x4d0 [ 557.165903][T21260] ? tomoyo_path_number_perm+0x183/0x4d0 [ 557.171557][T21260] ? tomoyo_execute_permission+0x470/0x470 [ 557.177472][T21260] ? delayed_put_pid+0x30/0x30 [ 557.182259][T21260] ? find_held_lock+0x2d/0x110 [ 557.187070][T21260] ? ksys_write+0x212/0x250 [ 557.191615][T21260] ? __mutex_unlock_slowpath+0xe2/0x610 [ 557.197193][T21260] ? __fget_files+0x294/0x400 [ 557.201997][T21260] security_file_ioctl+0x50/0xb0 18:44:45 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) [ 557.206964][T21260] __x64_sys_ioctl+0xb3/0x200 [ 557.211661][T21260] do_syscall_64+0x2d/0x70 [ 557.216098][T21260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 557.222027][T21260] RIP: 0033:0x45d5b9 [ 557.225939][T21260] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 557.245553][T21260] RSP: 002b:00007f874ea58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:44:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 557.253987][T21260] RAX: ffffffffffffffda RBX: 000000000001d600 RCX: 000000000045d5b9 [ 557.261975][T21260] RDX: 0000000020000000 RSI: 0000000000008946 RDI: 0000000000000005 [ 557.270001][T21260] RBP: 00007f874ea58ca0 R08: 0000000000000000 R09: 0000000000000000 [ 557.277992][T21260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.285979][T21260] R13: 00007ffe0dba7f8f R14: 00007f874ea599c0 R15: 000000000118cf4c 18:44:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:45 executing program 0 (fault-call:8 fault-nth:0): prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 557.382502][T21277] FAULT_INJECTION: forcing a failure. [ 557.382502][T21277] name failslab, interval 1, probability 0, space 0, times 0 [ 557.420723][T21278] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 557.432582][T21277] CPU: 0 PID: 21277 Comm: syz-executor.5 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 557.442624][T21277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.453480][T21277] Call Trace: [ 557.456790][T21277] dump_stack+0x18f/0x20d [ 557.461155][T21277] should_fail.cold+0x5/0x14 [ 557.465772][T21277] ? tomoyo_realpath_from_path+0xc3/0x620 [ 557.471516][T21277] should_failslab+0x5/0xf [ 557.473285][T21260] ERROR: Out of memory at tomoyo_realpath_from_path. [ 557.475944][T21277] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 557.475964][T21277] __kmalloc+0x6f/0x320 [ 557.475996][T21277] tomoyo_realpath_from_path+0xc3/0x620 [ 557.498424][T21277] ? tomoyo_profile+0x42/0x50 [ 557.503134][T21277] tomoyo_path_number_perm+0x1cb/0x4d0 [ 557.508619][T21277] ? tomoyo_path_number_perm+0x183/0x4d0 [ 557.514282][T21277] ? tomoyo_execute_permission+0x470/0x470 [ 557.520368][T21277] ? delayed_put_pid+0x30/0x30 [ 557.525154][T21277] ? find_held_lock+0x2d/0x110 [ 557.529943][T21277] ? ksys_write+0x212/0x250 [ 557.534598][T21277] ? __mutex_unlock_slowpath+0xe2/0x610 [ 557.540207][T21277] ? __fget_files+0x294/0x400 [ 557.544918][T21277] security_file_ioctl+0x50/0xb0 [ 557.549875][T21277] __x64_sys_ioctl+0xb3/0x200 [ 557.554572][T21277] do_syscall_64+0x2d/0x70 [ 557.559007][T21277] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 557.564916][T21277] RIP: 0033:0x45d5b9 [ 557.568830][T21277] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 557.588796][T21277] RSP: 002b:00007f5f00fbfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.597233][T21277] RAX: ffffffffffffffda RBX: 000000000000e180 RCX: 000000000045d5b9 [ 557.605222][T21277] RDX: 0000000020000240 RSI: 0000000000004601 RDI: 0000000000000003 [ 557.613212][T21277] RBP: 00007f5f00fbfca0 R08: 0000000000000000 R09: 0000000000000000 [ 557.621190][T21277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 18:44:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:46 executing program 1 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) [ 557.629162][T21277] R13: 00007ffdedb63b6f R14: 00007f5f00fc09c0 R15: 000000000118cf4c [ 557.671987][T21289] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 557.811345][T21290] FAULT_INJECTION: forcing a failure. [ 557.811345][T21290] name failslab, interval 1, probability 0, space 0, times 0 [ 557.825216][T21290] CPU: 1 PID: 21290 Comm: syz-executor.0 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 557.837821][T21290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.847887][T21290] Call Trace: [ 557.851197][T21290] dump_stack+0x18f/0x20d [ 557.855545][T21290] should_fail.cold+0x5/0x14 [ 557.860157][T21290] ? tomoyo_realpath_from_path+0xc3/0x620 [ 557.865889][T21290] should_failslab+0x5/0xf [ 557.870324][T21290] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 557.876499][T21290] __kmalloc+0x6f/0x320 [ 557.880678][T21290] tomoyo_realpath_from_path+0xc3/0x620 [ 557.886239][T21290] ? tomoyo_profile+0x42/0x50 [ 557.890933][T21290] tomoyo_path_number_perm+0x1cb/0x4d0 [ 557.896410][T21290] ? tomoyo_path_number_perm+0x183/0x4d0 [ 557.902065][T21290] ? tomoyo_execute_permission+0x470/0x470 [ 557.907986][T21290] ? ktime_get+0x3e/0x120 [ 557.912361][T21290] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 557.918536][T21290] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 557.925491][T21290] ? trace_hardirqs_on+0x5f/0x220 [ 557.930539][T21290] ? lockdep_hardirqs_on+0x76/0xf0 [ 557.935668][T21290] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 557.941849][T21290] security_file_ioctl+0x50/0xb0 [ 557.946804][T21290] __x64_sys_ioctl+0xb3/0x200 [ 557.951502][T21290] do_syscall_64+0x2d/0x70 18:44:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 557.956885][T21290] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 557.962784][T21290] RIP: 0033:0x45d5b9 [ 557.966688][T21290] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 557.986297][T21290] RSP: 002b:00007ff4799ffc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.994722][T21290] RAX: ffffffffffffffda RBX: 00000000000115c0 RCX: 000000000045d5b9 [ 558.002704][T21290] RDX: 0000000020000000 RSI: 000000004040ae79 RDI: 0000000000000006 18:44:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) [ 558.010690][T21290] RBP: 00007ff4799ffca0 R08: 0000000000000000 R09: 0000000000000000 [ 558.018671][T21290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.026654][T21290] R13: 00007fff965dd32f R14: 00007ff479a009c0 R15: 000000000118cf4c 18:44:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:46 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:46 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) 18:44:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 558.120051][T21304] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 558.134289][T21306] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 558.159682][T21277] ERROR: Out of memory at tomoyo_realpath_from_path. 18:44:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) [ 558.300910][T21316] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 558.357108][T21319] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 558.456814][T21290] ERROR: Out of memory at tomoyo_realpath_from_path. 18:44:47 executing program 0 (fault-call:8 fault-nth:1): prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x2, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:47 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:47 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) 18:44:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6}, 0x0) 18:44:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x7}, 0x0) 18:44:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x10, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:47 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:47 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}) 18:44:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x125f, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:47 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9}, 0x0) 18:44:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:47 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x301, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x127b, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xa}, 0x0) 18:44:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:47 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x3f00, 0x0, 0x4, r2, 0x7}) 18:44:47 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}) 18:44:47 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4600, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x2405, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xf}, 0x0) 18:44:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4b34, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:48 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}) 18:44:48 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4602, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48}, 0x0) 18:44:48 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x3f000000, 0x0, 0x4, r2, 0x7}) 18:44:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4b70, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:48 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4603, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 18:44:48 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r0, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r0, 0x7}) 18:44:48 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x3f00000000000000, 0x0, 0x4, r2, 0x7}) 18:44:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4c00, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x60}, 0x0) 18:44:48 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4604, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:48 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r0, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r0, 0x7}) 18:44:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4c01, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x68}, 0x0) 18:44:49 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:49 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4c81, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:49 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r0, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r0, 0x7}) 18:44:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 18:44:49 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4606, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4c82, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:49 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:49 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x3}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r1, 0x7}) 18:44:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x74}, 0x0) 18:44:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5380, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:49 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4608, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x7a}, 0x0) 18:44:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5402, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:49 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x460f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:49 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x3}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r1, 0x7}) 18:44:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 18:44:49 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:50 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x3}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r1, 0x7}) 18:44:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5411, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:50 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4610, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x159}, 0x0) 18:44:50 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:44:50 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 561.597288][T21567] validate_nla: 26 callbacks suppressed [ 561.597301][T21567] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x541b, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:50 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:50 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 561.704445][T21573] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:50 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:44:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x300}, 0x0) 18:44:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5421, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:50 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5450, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 562.006749][T21597] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:50 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x463e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:50 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:44:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x500}, 0x0) 18:44:50 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5451, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 562.286856][T21617] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:50 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4c00, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:50 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 562.337231][T21624] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:51 executing program 3 (fault-call:10 fault-nth:0): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:51 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5452, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:51 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4c01, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 562.546571][T21636] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 562.585790][T21639] FAULT_INJECTION: forcing a failure. [ 562.585790][T21639] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 562.632739][T21643] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 562.674106][T21639] CPU: 0 PID: 21639 Comm: syz-executor.3 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 562.684047][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.694144][T21639] Call Trace: [ 562.697453][T21639] dump_stack+0x18f/0x20d [ 562.701816][T21639] should_fail.cold+0x5/0x14 [ 562.706524][T21639] __alloc_pages_nodemask+0x183/0x790 [ 562.711929][T21639] ? clear_subpage+0x100/0x100 [ 562.716716][T21639] ? __alloc_pages_slowpath.constprop.0+0x2860/0x2860 [ 562.723522][T21639] ? find_held_lock+0x2d/0x110 [ 562.728324][T21639] ? lock_downgrade+0x830/0x830 [ 562.733206][T21639] alloc_pages_vma+0xdd/0x720 [ 562.737940][T21639] handle_mm_fault+0x2767/0x4530 [ 562.742908][T21639] ? vm_iomap_memory+0x190/0x190 [ 562.748000][T21639] ? xhci_stop+0xa0/0x410 [ 562.752357][T21639] ? vmacache_update+0xce/0x140 [ 562.757328][T21639] do_user_addr_fault+0x598/0xbf0 [ 562.762406][T21639] exc_page_fault+0xa8/0x160 [ 562.767034][T21639] ? asm_exc_page_fault+0x8/0x30 [ 562.771985][T21639] asm_exc_page_fault+0x1e/0x30 [ 562.776844][T21639] RIP: 0033:0x4782cd [ 562.780756][T21639] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 562.800373][T21639] RSP: 002b:00007f3615f8e4d0 EFLAGS: 00010246 [ 562.806462][T21639] RAX: 00007f3615f8e5f0 RBX: 0000000000749f00 RCX: 00000000ffffffff [ 562.814450][T21639] RDX: 00007f3615f90ba0 RSI: 00000000004d23d0 RDI: 0000000000749f00 18:44:51 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4c03, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x700}, 0x0) 18:44:51 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 562.822436][T21639] RBP: 00007f3615f90b70 R08: 00000000016a85f0 R09: 00000000004d23d0 [ 562.830420][T21639] R10: 00007f3615f91700 R11: 0000000000000000 R12: 00000000004d23d0 [ 562.838402][T21639] R13: 00007f3615f90ba0 R14: 00007f3615f919c0 R15: 000000000118cf4c 18:44:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x5460, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 562.965409][T21658] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:51 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 563.016925][T21639] syz-executor.3 invoked oom-killer: gfp_mask=0x0(), order=0, oom_score_adj=1000 [ 563.044705][T21670] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x6364, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 563.148216][T21639] CPU: 0 PID: 21639 Comm: syz-executor.3 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 563.158183][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.168255][T21639] Call Trace: [ 563.171570][T21639] dump_stack+0x18f/0x20d [ 563.176020][T21639] dump_header+0x106/0x60f [ 563.180474][T21639] oom_kill_process.cold+0x10/0x15 [ 563.185620][T21639] out_of_memory+0x358/0x13f0 [ 563.190387][T21639] ? mem_cgroup_size+0x50/0x50 [ 563.195440][T21639] ? alloc_pages_vma+0x135/0x720 [ 563.200401][T21639] ? oom_killer_disable+0x270/0x270 [ 563.205632][T21639] ? mutex_trylock+0x246/0x2c0 [ 563.210418][T21639] ? pagefault_out_of_memory+0xde/0x10d [ 563.215996][T21639] pagefault_out_of_memory+0xfa/0x10d [ 563.220003][T21681] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 563.221385][T21639] ? out_of_memory+0x13f0/0x13f0 [ 563.221432][T21639] ? xhci_stop+0xa0/0x410 [ 563.221452][T21639] mm_fault_error+0x123/0x380 [ 563.221470][T21639] do_user_addr_fault+0x5f8/0xbf0 18:44:51 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 563.221503][T21639] exc_page_fault+0xa8/0x160 [ 563.253608][T21639] ? asm_exc_page_fault+0x8/0x30 [ 563.258565][T21639] asm_exc_page_fault+0x1e/0x30 [ 563.263426][T21639] RIP: 0033:0x4782cd [ 563.267349][T21639] Code: 54 55 53 48 81 ec 28 21 00 00 8b 8f c0 00 00 00 85 c9 0f 85 4d 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 <48> 89 bc 24 00 01 00 00 48 89 fb 41 bd 00 00 00 00 c7 84 24 e0 00 [ 563.287922][T21639] RSP: 002b:00007f3615f8e4d0 EFLAGS: 00010246 [ 563.294016][T21639] RAX: 00007f3615f8e5f0 RBX: 0000000000749f00 RCX: 00000000ffffffff [ 563.302003][T21639] RDX: 00007f3615f90ba0 RSI: 00000000004d23d0 RDI: 0000000000749f00 [ 563.309994][T21639] RBP: 00007f3615f90b70 R08: 00000000016a85f0 R09: 00000000004d23d0 [ 563.317987][T21639] R10: 00007f3615f91700 R11: 0000000000000000 R12: 00000000004d23d0 [ 563.325975][T21639] R13: 00007f3615f90ba0 R14: 00007f3615f919c0 R15: 000000000118cf4c [ 563.427484][T21639] Mem-Info: [ 563.431347][T21639] active_anon:259 inactive_anon:169046 isolated_anon:0 [ 563.431347][T21639] active_file:11460 inactive_file:74948 isolated_file:0 [ 563.431347][T21639] unevictable:0 dirty:118 writeback:0 [ 563.431347][T21639] slab_reclaimable:21794 slab_unreclaimable:104039 [ 563.431347][T21639] mapped:61155 shmem:4385 pagetables:2290 bounce:0 [ 563.431347][T21639] free:1084195 free_pcp:630 free_cma:0 [ 563.478393][T21639] Node 0 active_anon:1036kB inactive_anon:676184kB active_file:45688kB inactive_file:299792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244620kB dirty:468kB writeback:0kB shmem:17540kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 620544kB writeback_tmp:0kB kernel_stack:9792kB all_unreclaimable? no [ 563.509345][T21639] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:0kB all_unreclaimable? no [ 563.537361][T21639] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.566861][T21639] lowmem_reserve[]: 0 2512 2512 2512 2512 [ 563.574022][T21639] Node 0 DMA32 free:557484kB min:35896kB low:44868kB high:53840kB reserved_highatomic:0KB active_anon:1036kB inactive_anon:676184kB active_file:45688kB inactive_file:299792kB unevictable:0kB writepending:468kB present:3129332kB managed:2575944kB mlocked:0kB pagetables:9152kB bounce:0kB free_pcp:2656kB local_pcp:1416kB free_cma:0kB [ 563.609497][T21639] lowmem_reserve[]: 0 0 0 0 0 [ 563.621490][T21639] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.655579][T21639] lowmem_reserve[]: 0 0 0 0 0 [ 563.661566][T21639] Node 1 Normal free:3762140kB min:53992kB low:67488kB high:80984kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.692035][T21639] lowmem_reserve[]: 0 0 0 0 0 [ 563.696897][T21639] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 563.716331][T21639] Node 0 DMA32: 5643*4kB (UME) 766*8kB (ME) 566*16kB (UME) 446*32kB (UME) 269*64kB (UME) 87*128kB (UM) 33*256kB (UM) 16*512kB (UME) 4*1024kB (UM) 2*2048kB (M) 110*4096kB (UM) = 555772kB [ 563.737301][T21639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 563.750729][T21639] Node 1 Normal: 67*4kB (UME) 204*8kB (UME) 183*16kB (UM) 98*32kB (UM) 33*64kB (UME) 21*128kB (UME) 4*256kB (UE) 5*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 913*4096kB (M) = 3762140kB [ 563.769919][T21639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.782288][T21639] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 563.792884][T21639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.803628][T21639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 563.814119][T21639] 51175 total pagecache pages [ 563.818908][T21639] 0 pages in swap cache [ 563.828460][T21639] Swap cache stats: add 0, delete 0, find 0/0 [ 563.842330][T21639] Free swap = 0kB [ 563.856302][T21639] Total swap = 0kB [ 563.865740][T21639] 1965979 pages RAM [ 563.874383][T21639] 0 pages HighMem/MovableOnly [ 563.893517][T21639] 350466 pages reserved [ 563.897801][T21639] 0 pages cma reserved [ 563.910763][T21639] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=12041,uid=0 [ 563.933179][T21639] Out of memory: Killed process 12041 (syz-executor.3) total-vm:93548kB, anon-rss:4276kB, file-rss:35984kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 18:44:52 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:52 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xa9b}, 0x0) 18:44:52 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:52 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x541b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8901, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:52 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5421, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8902, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:52 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 18:44:52 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5423, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x2) 18:44:53 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8903, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:53 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5450, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 18:44:53 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x60) 18:44:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8904, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000}, 0x0) 18:44:53 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:53 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5451, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:53 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8906, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x2000) 18:44:53 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5452, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 18:44:53 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:53 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x3f00) 18:44:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8907, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:53 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x5460, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:53 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 18:44:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8910, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:54 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x6364, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 18:44:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x4000) 18:44:54 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8911, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:54 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x6609, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x5901}, 0x0) 18:44:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x6000) 18:44:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8912, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:54 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x8901, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 18:44:54 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x200000) 18:44:54 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:54 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x8912, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8913, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:54 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6800}, 0x0) 18:44:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6c00}, 0x0) 18:44:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x400000) 18:44:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:55 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:55 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x8914, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 566.632041][T21933] validate_nla: 24 callbacks suppressed [ 566.632052][T21933] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:55 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x600000) 18:44:55 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x8933, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:55 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:55 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:55 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x80ffff) [ 567.019866][T21928] bridge0: port 1(bridge_slave_0) entered disabled state 18:44:55 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x8941, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x7400}, 0x0) 18:44:55 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x891d, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x2000000) 18:44:56 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:56 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x8982, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:56 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x8983, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 567.521610][T21998] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x3f000000) 18:44:56 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 567.595191][T22005] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x891e, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x7a00}, 0x0) 18:44:56 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:56 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x89e0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:56 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 567.869975][T22028] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x891f, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0xffff8000) [ 567.915772][T22032] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9b0a}, 0x0) 18:44:56 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x89e2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:56 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8920, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:56 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 568.163161][T22058] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:56 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x20000000000000) 18:44:56 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xab04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 568.244262][T22063] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:56 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 18:44:56 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8921, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:57 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x40000000000000) [ 568.475802][T22083] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 568.514265][T22089] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:57 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xae01, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:57 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 18:44:57 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:57 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x60000000000000) 18:44:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 568.772366][T22111] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:44:57 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xae41, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 568.825623][T22116] bridge_slave_0: mtu greater than device maximum 18:44:57 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x80ffff00000000) [ 568.868193][T22122] bridge_slave_0: mtu greater than device maximum 18:44:57 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 18:44:57 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xae80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:57 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 18:44:57 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 18:44:57 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 569.175088][T22146] À: renamed from bridge_slave_0 18:44:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:57 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x400448c9, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) 18:44:58 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:58 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 18:44:58 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 18:44:58 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x400448dd, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:58 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:58 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0xffffffffffffffff) 18:44:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8927, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 18:44:58 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:58 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:58 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:58 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x185000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r3) syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x4, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r9, 0x0}) dup2(0xffffffffffffffff, r6) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r10}) close_range(r0, 0xffffffffffffffff, 0x0) 18:44:58 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 18:44:58 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x400454ca, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8929, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:59 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:59 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:59 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40047451, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 18:44:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8930, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:59 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:59 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40049409, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:59 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:44:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8932, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:44:59 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:59 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40182103, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 18:44:59 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:59 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:44:59 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40184150, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:44:59 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x26002, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r7}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x400}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r9, 0x400454ce, r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005b00)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)="f8a832ab1413a9d11d3876761291dee360bb222312c0984e9ed29ecbf70bfec695380b449bfbbf270241469df89f281115b499f7184f174b9e", 0x39}, {&(0x7f0000000280)="77f565d26631d2bb6d52230b64c21069dc24c94f6b58844faeb77f2b4dc4ec3c6ffd24bec3b644aa07cdbfc93d560a00829aca9078ecc5db0675f8481aa8e2a7526bbb2636b52224fe14651cec4d01ab1c2696846d69bcffeaf6598dbb2e216a79b5ab9e91dc1de6e283f8352902eb4e96674443da79ebd988471529ad0cf1de73c7e0a7de7fc631ad8040615f3bc415bbf3b022ca160096c58735524329a593a84ba75d6cbafced40e24ce8b5a8dc54e145c631d77a461bb43a760fb15cf09d0e25d95526bd3f380f79df8c15df6fc8acc4c2811569c2ecca3caccba028166ed4ab521cb22f", 0xe6}, {&(0x7f0000000380)="58916a2d7ec268e43b5f6100586da5dd0dfb69d1e4cadc8fbaefa10f9ee0b0d3bac1dd0ab7d0397bb6a90a88ef6cf4b8fab3082efbbd9c5f7dc37f16ee59e809afe7d774c3b3e4a3ad9728bf583391b0b70eb013f96c6c8ec4546fa2b4ee15c0d9fbd93fcf9f39d236b3d3b6927a1b532ba607aef10a20f1ac469724af42e2578ee966a65d39de5e93b8f1e48db515778cbe912357ac2041596e915725afe553e24d76bcedf1e2ead9af9944b0275bd8623ece958fb3b486f0ffc9e0231aa0cb9a315af4723aabeb1b1280954c8a8b19ab8052bb48b339ad14f52a6e6beb00d43b4adc408f2b62177b9f", 0xea}, {&(0x7f0000000480)="30f77e57f715da4908b669d94f5e099ddc6b0057f7747e599a653bbafb523b74872c683ee3dd844b82bdc823f3d48cb1f08ae8cb2fad6d9585c130a42fea4de5c40fc4321f6d289be51a34b8efa1b2bb9a800762cbd040a572cf2d3e61233a38126ca9a2fd85a9128fabf0a1732d61ca9dce8d70de11f15996650cb7d56a243bab0765d8259906a4b6172f38091a04894ee86d77360bcabf5ae645bafbb2f0a9fff19ad7b9362a939aa8dc83517ba72938bce23755fce82e582ebb", 0xbb}, {&(0x7f0000000540)="7d1c00b65a4c2a671f9f94444da5ffe54f67d5266f3d7f2b1c973bcfda1d746c339c2304972528ec8816ddb46196baa45db2336c0e12e1aa55a7964aa0f258d0a35a447447ea65f7e8316d9e29f7237d7431ecdd78bfb857509f5fc3a919fb19740934a1f235a93a9e24ec43b1e318670c3762c70fb427998660a064028f54ca4fd2cca5c55edae1095e3294e70afa55a88d1ed488a4bf344c986491dff639050b75a764bcb42d6bf95614467a805b1353c375fdc43b0c2b046c7b73e74f037485cf707adb88d9b0f5bb352620fb58e50904ec7fc126b52f50d6de31cdd8429109707d06e221", 0xe6}, {&(0x7f0000000200)="875bba63083a", 0x6}, {&(0x7f0000000640)="9209a082ae2dfade783e5673ab10d3dbbbe873f0e769f6559be6f2107c8c9a6c31c19056266937bfd9677b0179b678ca82295116442e1c26b72d7b21b4991c757f7a92808bcf4ac2f53c", 0x4a}], 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="1c0000000000000001e0780a2106c76d63c21774836300000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x1}, {&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d00)="a42cf620fdba38fd58cc4aacba281c65d25ef1dea10481ca02ba22593c8757a4dfd6bb1123c00db180eb38694e59f0ec65e38a454ccc689087aae1eb4ea26ae6f571a575e5c0f27016ad0201bf661149a3cab814267b742ae1b8bcb2313b07904df654d51368ec7ce2adad71a1575c2e4b1fa4ad6a1fa73223502460b58353ff0e46aca579a2fdd8cb156b6e7f745ca034946bfd4ea5e1c2103846b55537c216254def97b652c55a29850af56051f7772c81cdff2ec39033991971fae8c36bd553a54002063597ae2eb4914f8a3af3", 0xcf}], 0x1, &(0x7f0000000e40), 0x0, 0x2000c000}, {&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000f00)="c7e5f0c7a4ba81dae2cdcd6830338d3f18c3bf49f08c78a2f5b034749a85d047011859b164ff580231c1e40df4ed5f43411f991fcbe9e2a209f196f221a8f2fae7c53f46991b458635a4434b120831943ef27618a083cf2ed183169fb81df1e52d3eb10780c3141ab0173df794d60e8d295d8c922dbbc8ff0edcc62e8f665c83a5627c8d4b0eaeb5ddea8a0741ef75845d9d9fea2b1d5df523c3a1337be0a01a1fa7e55e0c35a9ab48a3a6de03b13e044b8aa1ad448d854f079d6f55285684872a91640cec379e06ccd14f9f48bf9c0b86099d401151b1adbd4d8ce0494e60ae5d27c10763dcce", 0xe7}, {&(0x7f0000001000)="ad217e37b0516aba5f22dbd8902478987ac52e0cb43ace1e028be6fbcdf5e2fb8e4d6abd1f56e718c7e40d3d4b8789c2b9bce90366c8dd0c1f1f1d0033bcccf9162b4ff020f8fb9cfc429828d8a5be989510adf4d189df5d1d3aaa8527aa35e63f64a99915434b7bae175c128cb381aa2a46487d7f47e24c706f8470e65294351c462087c21edb4d3c6b3f7d1be1655dd26614f9a86d", 0x96}, {&(0x7f00000010c0)="9014f8bd822167184d863446333eb6863d9bfd8f99ed4739e3f72d55580ea2ea6c52bba407d60e12449d62d511bf948da6517d4b56ae49630cef4c5408bc5fb11d216e6e3d0cb9cfaa5cb8a37adb00a5ccf969194cb33e73a7fb760abbb03373bde8447502d21e020f34485da75a02a164043ca8e4e4d316217e1f6b45bd680804039ee9c96a2eeeb2884532022966d4545040255200d75cdf44e1eaa023e7468b7441d665f883ab7c27bf560b09e01254b6cc2fe74d1b83501e8893cd9336a90efcc0b15180e838daa912d05c4af5cc38f22aebbc234afaef1f8980dc293b4252d1deec6e814e125b7ad5bd980aa19660fcfc13dc02c9a9b6ccf1cfc336", 0xfe}, {&(0x7f00000011c0)="6b98804ca2496ac654733dea8d1827c97af69ac774b8593af6792f2ef87efd1f58e083c43d31924beb29c2934b85bb8af021ea768aedaeca628f470250709c0e696697fc6eec41f8e2fed97e6549f1dfd8e96e7d1ad2e85e11b93c48dd588ef0dba71ef7363e45b49670fb68594f1d9fda453999c673517defd4637d4f4061ae99ade8f0878ab119d2bc23b6d05f154c9288eef067d98316080ccc5c948e72c0", 0xa0}, {&(0x7f0000001280)="f1244f76a49fe0ed70aac12758dd26ee94b28464f4cb886db433cae776318545937dfb3c0288cfdafe87f25885e68de429eafaae67e75e4c9f7a4d80b334bf20ceb7b19865ac3e", 0x47}, {&(0x7f0000001300)="f12050901d6575313b0bfb5fe09e9aa42ac1b4612fb8dfd518f4f9a7ece9ca60337797c9433d3ee5385917bb26fd1c48aa53d14fa2a0d0aeb31d03d40bbc7aa9a6955a32e594056f6878dac96b70a5e0bbf43ffbd6737faba633cf5124ae23508cdcdb8c8447fc59405255f18b6b588763da06d7966c90e433206e9258ec7bff649529ed6b400c3f6f223de2ecc90a0a43bc6f5a7e4c0fa7d8b8efe0c5e62212dde6b32be404963aeb97a16527c4e016817c37bb01c6faa93684e0cfab87a85d3a5b6c2aa63afb2f97f7711ba99b9da31e7e0f9c5228c0b2b493993d2930c8b7d52eebb3d9692a67941cba21f31497668ff75b24", 0xf4}], 0x6, &(0x7f0000001500)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r1, @ANYRES32, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x1}, {&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001640)="e200b79dd0d5bd611b69109b1cece9507c794870bd4e0cd6e4e4a67f5a8ab543d7294029c988a8bea1f8191dd83589cdc6d8e143cf1312e1943f75b480310eb04c54d2b1d7626360a0b3ddcd40a92746136ac1e1d8612526f81ab2d7b322c8f9a739099a857e121c77a3418c0dd42c1dc5d27a76352ad317bd62a9e01c09ba11422b61faf634e295ca8242de50c6fe468a0c1676c31e284a1a8f8155db96ea93c7e5d8a9754bc7e966b602f9f7aefc06a9df3c097572a6daae395cdda33a46af87cbb7c7686c427df6c5c76aef0940441232d18e2e9502d33b1210", 0xdb}, {&(0x7f0000001740)="a8fe8275ed0200f7db036f7402dc17fab8e6a319a9687afac24f376d74749e3125171caaa566ef47871a8cc1ee277589e53ec024743156088c7110a82315e4e9239aa76205d3d575d86c4c5a67bb6f37c13d7e1f114a448c4acf3904e14e7a8092ba2e884673f6953c3093e767acdef802b45c4d35122b23358065886526cfb25c1a8d192008", 0x86}, {&(0x7f0000001800)="fbb2f83b6e68a629f10a032f802880fec632b04de79a2911dd9e30d280729addf17e101902bd4cab81bc24fcbd1615e520bc35ab98a7fc75ae20dc90c0c8ed8a12340984d80198c892f53b653f88d8ee14152ecf629f6e20ace8495977338d5451c722da5eda94be6c183f618fdf963938beaae2dc4b938ee3c7cdae4a89", 0x7e}], 0x3, &(0x7f0000001900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r3, r5]}}], 0x78, 0x64000851}, {&(0x7f0000001980)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a00)="9c53fa4167b587cb4f0a133f27bfca3110ea4cf846826b29f2f1f9bc7ba7d920f939c780e1a2463ee2f97f7b12c878446d6e3919cbffcea8ddecba46e14fe41b1fd22b98a41f8da10a60161a223970891d4ffacf", 0x54}, {&(0x7f0000001a80)="2e7086ef4b0564e8b2664a4c5400b483e1f40f0d2350e8997d889dbe3b06255cd72538d779dfc4d4b0c40086f9a7fa4fcb4939937b3607d133b8ea141b84c60ec701057781c6dc59da58e3312c0bc03857475d54ddf13f42694804d52ef7ad76341351977d8123f542e9ca3f4ab2df8098aa7aab763295ddce85b5545e82de7975573c722e5a6548d4a75b22c570f0d0a2f8bfe46f35607735ae21d1e7539769b890234a3afd1ccfda57c51b7716c0aba40ce203bf", 0xb5}, {&(0x7f0000001b40)="52da59d01f55d0026cc491513f876adcc2bfc2786aa083bbd5572d8d84f0b0bac2868ea2381fedb4441696aa75b163be664552986590769d1837635dd7f2ad298d0764530f6e89f10b9548629dfc5723e65dc22d058d3bdb366e33cd5b31422ad63474013846ac702d826bb153fa50cd408d32052e7403ce716c3dc885382c08e6ad946db5553c9d7057401df5f903bd19fe3e93ea5e5d2ca0f4e7f509672f7795dc5f63764abd03ca3de35f96d8144a7ebf6bd6a9558a73df4b96eb695850f0c3b59ba8af0e81d4667b545100ce62193d54629074d2d82da4fff3", 0xdb}], 0x3, &(0x7f0000002180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r3, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x120, 0x40c0}, {&(0x7f00000022c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000002340)="43d919159c7e2234d733a4494afcb45fa00976", 0x13}], 0x1, 0x0, 0x0, 0x24004805}, {&(0x7f00000023c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002440)="97ddb805d2771c008b94c6e2a87b632a7168bc5f9521479df7ca5b516159718cbdba6b6ccf49abe9022a04275d5a716a926ec176027586f1ad229ce6ffb209fd6061a17f2dd1dbe5e34059efcc690f7c15a7b0512e5a9725ba21cc6979268c9a1948ad9e223c30b970b0d7e94b6d31dd7dd70e2626fc4084928ad7f2965a0e063941382633bf7e35b11739b75dadbee1093cd7eeba7f87d48d0839ab7285b5d03efdd33a425721b58ede795ced02fe0e01f55602ffe9e307bc4dae7f61be336f698776c58f4fa40d0b27ce28e5", 0xcd}, {&(0x7f0000002540)="8d8e2892962ca12e241f", 0xa}, {&(0x7f0000002580)="b405ae1a75dff23f3f911b1f0b", 0xd}, {&(0x7f00000025c0)="dc317e31125b07058e4ef31ab4c11d0f8a17f421095c65110701db0973ca1d212301345cdc1a3b3ee832d9be4308dcc11a3b567500b05da970cf", 0x3a}, {&(0x7f0000002600)="b9248d74e563bb126f4759f4e7e469978868bb2e82a3fac4f12f8c2e090c0379cd668799e95cb169496b9b992f68950fce53cb0a77dd8755b0ad2d96c649e18bea99077c1f08d69a149b1310391e41e3b61fe9867d580edcc9cc956f740370bf86656a1fcc3fcd99043fe1f6a493f4be9b9a210c276e9a90238f8650de9da9e8648f38e9d6f9fe7d01a38a98c2122e06a1e4af7a55d16a2ab1c800ca6675d1fc8b865d77bae961f9795a2c87422f53c71cb635d3feeb2783fce146b75cdb5371fb05b98aad995df9b06cf7ac11819d4bbe6ecead36191f6a0ac622b58cdc18", 0xdf}, {&(0x7f0000002700)="3592bb304e36a5805669dcf93ababb5c3165fd1a4af85a3c70151bd622093fbd3b6123b2e0717c28391885762a7f276132dca5f916c49f984185f30ad09a337f21621dfa7b194eccabf3a30d43a9961e8acd6780396a6e1ce2b899bbfd5cf177ce2f34e94643b446ce7434be143ddd4bf27809dcc34206e3e5befa3b48460b14795bf110c6cf53cc42", 0x89}], 0x6, &(0x7f0000003d00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x68, 0x4}, {&(0x7f0000003d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004ec0)=[{&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="ceed1d31f00f6149de280b9d8e1a4e42bb07324e352fe4a18baf61a50e426e299007ef08c554234f1752e7139115c1aa21202cbf608ad3664aa74823f44764b653a8daa0e4706c357cb45091538268b51203db14bb5948069989bdd72f55a2993e4454fddba949cf7ba22fd7f2e823e4c4c73b4f6657fa983b48d27f45c97100ef48ff0694b5b69ed0df557d3996d436e9f2e6a65dca84a0d0e82d1b0b199d893dda223a5e998170bf5d72b9bfe6", 0xae}], 0x2, &(0x7f0000005800)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x28, 0x1, 0x1, [r7, r4, r4, r0, r4, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r10}}}], 0x108, 0x48084}, {&(0x7f0000005940)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005ac0)=[{&(0x7f00000059c0)="0a5bcb494da993bf36fd0595275aa12f42ed9e7c75d080b79b4fb836a40cfd3e94e4dadaa647903dd4", 0x29}, {&(0x7f0000005a00)="89d769205a0d2943413060789425daa5f50311c88d34ff215f43ff8b09752fd419f0209a4826ab262cd3a0fcabec007085dea555c0c84e470f92b7220ba9fac3fe028462edb9af16", 0x48}, {&(0x7f0000005a80)="2101272f97b8ab9dd1a0a5daffd94f58f0548fac6eac52946508be8cd8720fa77da65f269003d158dbac", 0x2a}], 0x3, 0x0, 0x0, 0x20008841}], 0x9, 0x810) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r11}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000840)={'batadv0\x00'}) 18:44:59 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 18:44:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:00 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:00 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x401845ef, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:00 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:00 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x9, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 18:45:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:00 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40184810, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 571.740259][T22368] validate_nla: 21 callbacks suppressed [ 571.740271][T22368] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:00 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x3}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r1, 0x7}) 18:45:00 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:00 executing program 3: sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x2e0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "30417e8d316893b4bc507102857369f7f273947a7ce6609f8f722adf9978f0f0bc26157ce9109b769854e0f19ae7522ef8540f4cba4c90a07470fc1daa5b727ace6a66f0df25398b"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x51, 0x3, "5479ec4053ccff1eb1c595c5fbc25a5e4ad2b9bb40637dab4b695440eaba02c4de171c32508a160b7cc293288819f2bffbe961294bec6d379592d7621d1f846740caca424c1354eb00da55d0e6"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "281d55d947805cc0118fd653e6e7a26f72b4b0e7f48b89"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xba70}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x454}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x624}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3084}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x19b225f3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x29e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x300}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x839}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x28, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) [ 571.840191][T22375] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 18:45:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8940, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:00 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40186366, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 572.096152][T22392] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:00 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x3}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r1, 0x7}) 18:45:00 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x79a9, 0x4c4001) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x9, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$VIDIOC_S_CROP(r5, 0x4014563c, &(0x7f0000000140)={0x2, {0x0, 0x6, 0x0, 0x80000000}}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000100)={0x0, 0x9}) 18:45:00 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:00 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x40187542, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 18:45:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8941, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8942, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 572.370196][T22417] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 572.409153][T22422] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:01 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x3}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r1, 0x7}) 18:45:01 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4020940d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 18:45:01 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 572.677380][T22438] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:01 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:01 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4020ae46, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 572.729149][T22444] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18:45:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:01 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4080aebf, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 573.078441][T22469] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:01 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8947, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 573.151677][T22476] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:01 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:01 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_GEM_CLOSE(r8, 0x40046f41, &(0x7f0000000080)={r12, 0x7000002}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f0000000100)={r12}) 18:45:01 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 18:45:01 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4090ae82, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 573.373045][T22493] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:02 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8948, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:02 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = signalfd(r0, &(0x7f00000004c0)={[0xfffffffffffffffe]}, 0x8) r10 = pidfd_getfd(r5, r4, 0x0) r11 = syz_open_dev$amidi(&(0x7f0000000600)='/dev/amidi#\x00', 0x5, 0xa2000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) io_submit(0x0, 0x7, &(0x7f0000000980)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x24, 0xffffffffffffffff, &(0x7f0000000140)="4d60dba9d972bd33d978d189cefea638f0a0a7b4ca0f2293beb217c52651ca814b2b93b36036ab0b23eaf27eba3121520cdf9951e5a16f5556d441013e6452c844ece4323d821b340f238dc8ceacd917eb160b1878e99dd58708866cca20b40e37134927074eea0ecdab6092d1205ddd452c3299a46a38a93f052f084c", 0x7d, 0x8, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x401, 0xffffffffffffffff, &(0x7f0000000280)="72e834f90806283790402c2768012933e86a9d28772d7f56842b6db57ac35f762095095ff891cc2550ded51a74d222075b4fe997d533f954b082629560a16bf092b95b6c131c66a3e2a0e010049ccea62f24fd163512ecc5a15fbfef9368f2e3933fb428ebb9fbd6309b97899be95f18d1c2b1084ee64884041ae2d0d1389cfd7194c72e68637a49ff3e5cc7bf82d527fd1ec5516c6f5dd42b9bfeb511c06c7438e8a87b8937e3a79eaa99a1cc52f1e89a4949934fb391c7a1483ae16bda27f233bc481e6cae155b61e542801e1cdb512d7d8dfcf58061c0a4ecab3fd1f43de02f2a0015489d173157548482", 0xec, 0x985, 0x0, 0x2, r8}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x2, r0, &(0x7f00000003c0)="d456e984a44af88042c566fa9d69b45220264223253a713ebb73adf829bac7be1498c7b3f6f5fa834c81cfbbcf04fd9c98e1ed646622603edd461888c15514565b94bd5450924c12defe8a92857b47370fdc56be6e98be04ae7ddd40ad6b9510a8cc857b24dbba8c141838d093dcaae61070812f8e3e43a4674a818cb7ef35af1a50002dec637cfeb5044b57f259b6bff695fa49ddbfcdf7c7e714101e2bd7b8ae9e259c03eb46ff21ab98cc106405eefa1a96d23a12404a4a4770f089773800798f7d5288a8e539b100cd6f895e90c20c4fdc83d6a2a79fc90eeef03e3ec7c0766b25", 0xe3, 0xa3b, 0x0, 0x2, r9}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0x7, r2, &(0x7f0000000540)="25c72294ef6ec6a4b6127dbcf2e6ca7c5c2e24e4b744dddc718fa9680b063862c28ce23fe22b23a7397e3d32367fdd58dcc01f78ae3d94b9a78586fb9822ae926db287103898b071853b1e8910941e9eb70392032dd8f0c4", 0x58, 0x101, 0x0, 0x2, r10}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f0000000640)="0b346201b70e431841611d61e867fbdaadc69086105ee1a475beb2216b9ea44175373865bca09c3db4d2b3009fe2daf19d17ff9a6579e462a3327f6f6b028295d56d1f6d0509ed2b3c2620c6798512f4a628453d3ae501e23e141e7b8f1a9b417d0290e9216ec47e8d4df82758f544dd830ac1", 0x73, 0x200, 0x0, 0x0, r0}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x4f0931374c5a81e1, 0x1f, r1, &(0x7f0000000700)="975531a8f8f9f494761f90b715723289168963548af934bb8f7fd119aa717676f78a0efd749e67f0b25c0c53244f40b6ef4f26aa9d5b41c1c2d16c7ee78285842f618d2025e19e9b0eeb23fd4221e98e815d41ed4cf18f437fb2745144f1dfc6ff1e1ee427d5e00f95ff615902e63233a6ce10acccc2f45996b25720d80f58e448fc771a06847f3f2535fae490bbbdd4cd046bb4a57b2633805272d650f51cfd4710d26369d6177829e3cc6d0a896b306f38710cf3662f2cbde18cc3cde4c6ead5677551326de8bba96014e04071a4fc3c91492d3ad110cc714299bc2318194f47cd550f51024c", 0xe7, 0x2, 0x0, 0x3, r13}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x2, 0x1, r0, &(0x7f0000000840)="0c53cfe1a9e746390d8f2f44479c77c17f1bf0674ba7803d7283711e6ae76ffb58f37f86b8cbc53d49f27e225357ea849f140133574b65fbdd3cc043db5dd28e2c643b64e282f5add77e15ae16baccf406aba50069408d503098f33767996ccd9dcb8ea290dc521dca43084efc36e020c7877f2c9a64be63938f8027b12828fcfae7856a9558d43b5a7386f4cf61694e85732115306331396c0f457ee601ef4b7a709c75980ff2f2cbeece08b25a63e253f2ba38d8fba1de1c2dc45e170364b8008a", 0xc2, 0x5, 0x0, 0x2}]) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 18:45:02 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x80045430, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:02 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:02 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 18:45:02 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8949, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:02 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x80086301, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:02 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:02 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x59010000}, 0x0) 18:45:02 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x6, 0x8, 0x1, 0x2f, 0x6, 0x4, 0xffffffff, 0x2, 0x3, 0x5, 0x50, 0x6, 0x101, 0x7, 0xd6c]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000002c0)={0xfff9, 0x9, 0x8, 0x3, r8}, &(0x7f0000000300)=0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x6ce42) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$HIDIOCINITREPORT(r10, 0x4805, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:02 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x894c, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 18:45:03 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:03 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:03 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0045878, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:03 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x60000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000001640)={0x5, 0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000000500)={0x100, 0x2, 0x3, "8be6d4bafd089289f2e580993bb193331c027edf02a8707d9871099267f4537240080b140bd7fb1a4426f7841a0a2a285f632f3c34832e09506a5222", 0x33, "6c165875a276fce3ffa686cae70af62a2bee50479e3eaa48b005710e0aa40437553e86e3e2d28584a004a0026e4a1535884a5889f302367da0a65b6d", 0x7d0da61f6d0fede7}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$rds(r9, &(0x7f0000002100)={&(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000001840)=[{&(0x7f0000000280)=""/247, 0xf7}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000001480)=""/154, 0x9a}, {&(0x7f0000001540)=""/244, 0xf4}, {&(0x7f0000002200)=""/16, 0x10}, {&(0x7f0000001680)=""/57, 0x39}, {&(0x7f00000016c0)=""/222, 0xde}, {&(0x7f00000017c0)=""/109, 0x6d}], 0xa, &(0x7f0000001f00)=[@mask_cswp={0x58, 0x114, 0x9, {{0x805, 0xc26}, &(0x7f0000001900)=0xffffffff, &(0x7f0000001940)=0x2, 0x7, 0x9, 0x8, 0x8, 0x8, 0xe48}}, @rdma_args={0x48, 0x114, 0x1, {{0x7fffffff, 0x1000}, {&(0x7f0000000640)=""/243, 0xf3}, &(0x7f0000000900)=[{&(0x7f0000000740)=""/203, 0xcb}, {&(0x7f0000000840)=""/130, 0x82}], 0x2, 0x28, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0xf4, 0x4}, &(0x7f0000001a00)=0x4, &(0x7f0000001a40)=0x8, 0xfffffffffffffffd, 0x80000002, 0x0, 0xff, 0x0, 0x1f}}, @rdma_args={0x48, 0x114, 0x1, {{0x0, 0x6}, {&(0x7f0000001a80)=""/24, 0x18}, &(0x7f0000001d80)=[{&(0x7f0000003240)=""/102400, 0x19000}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000001b80)=""/231, 0xe7}, {&(0x7f0000001c80)=""/70, 0x46}, {&(0x7f00000005c0)=""/71, 0x47}], 0x5, 0x12, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8, 0xfffffffd}, &(0x7f0000001e00)=0xd9, &(0x7f0000001e40)=0x1f, 0x100000000, 0xa214, 0x40, 0x2, 0x0, 0x81}}, @cswp={0x58, 0x114, 0x7, {{0x8, 0x7}, &(0x7f0000001e80)=0xfe, &(0x7f0000001ec0)=0x8, 0xdb, 0x3, 0x1ff, 0x100000000, 0x5e}}], 0x1f0, 0x4000880}, 0x8001) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x6, 'batadv_slave_0\x00', {0x2}, 0xf6a4}) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000021c0)={&(0x7f0000002140)=""/109, 0x6d}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 18:45:03 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc008ae67, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8970, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:03 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:03 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)="a552bb58349d8bea488bfe057b1ccb89feb91f84ea2cc246d6219745f5e951082d58c461d215c0d2e09050256ff5d994de038aae60f5bf4f945da00cd7196c7dc0c921239f132603f33e7cda6e2c221bece9f852cced644c3346b6fc0e7201fb1c47d536d599f9d286ad503a28007f661c32887b84bee20ed89690270f714788193d679ae91787022523ab873e19c831adf7f5c0a47fbd56a0", &(0x7f00000001c0)=@tcp, 0x2}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r9, 0x40184152, &(0x7f0000001300)={0x0, &(0x7f00000012c0)=[&(0x7f0000000280)="c3e5c632dea8eb3cfc9fd8", &(0x7f00000002c0)="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"], 0x7}) 18:45:03 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) 18:45:03 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8971, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:03 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xffff, @private1, 0x7ff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000280)="a8f0070cbc19264b3f1444b28c82e211a0e96d03ffb1c1c26371d721e192d26cfa7b34a3c3e08350403cc4665f0d57aa109477ac74062886a7b6e3a4816a146522547f18d4adfdf17bc895473c0d7bb88170c5a57ba84d65259b1e30cf0caab9f2a5a55061420bbb67cc347f84d51f995e95973003437aa77648887eabb6fe6588fb11f4763597f2a87fd569658f4150187ac8386273c77d1bb1999338815aabda834105032e0aa6f25c29c3920c889f2224d9d3f6b6ad873295fe0736a5f293f6e557275069f5c15c3312cf3a3258744978a8deca95d4b5", 0xd8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="480000000000000029000000390000002e0600000000000000000000000000000000ffff0a010101fe80000000000000000000000000000ffe8000000000000000000000000000aa"], 0x48}}, {{&(0x7f0000000380)={0xa, 0x4e22, 0xd1, @dev={0xfe, 0x80, [], 0x2a}, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000003c0)="6d21222cca71fb67e1852d7deebb12d964247bb27d65a2adf5607ecb6a67685b4b3ece5443edbeb4b4338696f14516a5230aa57995d2e1e55297a8adb2a3a4074d20d49f92199df224dea69969f25da8436ffebd34634ec5dd16f8a532fc12b069d04319a5aa0706acfb108652ec64f89e0c6a55de57ce673b687d022901f2e087457c1409df6b40989526ac304ac11eda02ad5aaa404290ca19eb596e0167d7369d7686855114141e1cc95b1162b5cddf752093190d9d643a60c55a82e4b1f64070636d42c65a8238b684d9a80af5553aea1f7921ced0376e56b975189591d84e77e15d25c33a176fed145fef", 0xed}], 0x1}}], 0x2, 0x4040000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0x42, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000a40)=0xd000) setreuid(0x0, r10) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) mount$fuseblk(&(0x7f0000000580)='/dev/loop0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='fuseblk\x00', 0x42, &(0x7f0000000840)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r10}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@measure='measure'}, {@obj_role={'obj_role', 0x3d, '%+\xd1(.'}}, {@fowner_lt={'fowner<', r12}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x33, 0x61, 0x65, 0x38, 0x38, 0x63, 0x30], 0x2d, [0x0, 0x39, 0x30, 0x34], 0x2d, [0x66, 0x30, 0x65, 0x61], 0x2d, [0x32, 0x61, 0xa, 0x30], 0x2d, [0x0, 0x63, 0x32, 0x37, 0x39, 0x39, 0x34, 0x37]}}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ion\x00'}}, {@fowner_gt={'fowner>', 0xee00}}, {@obj_type={'obj_type', 0x3d, '^*\xae}'}}]}}) 18:45:03 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0205647, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 18:45:03 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:03 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:03 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000300)={0x7, 0x100, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x1, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[0x3, 0x2, 0x3, 0xd424, 0x3]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000200)={0x7, 0x1, 0x6, 0x1, 0x0}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r10, 0x84, 0x23, &(0x7f00000002c0)={r11, 0x7ff}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:03 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc020660b, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8980, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 18:45:04 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:04 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x404002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x81, 0x8001, 0x10000, 0x20}, &(0x7f0000000180)=0x10) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8981, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:04 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc020f509, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:04 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9b0a0000}, 0x0) 18:45:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 18:45:04 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0285629, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8982, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:04 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:04 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x83c, 0x102, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3ff, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(0xffffffffffffffff, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="020a8b54", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x5, 0x8000, 0x1, 0x96, 0x2, 0x0, 0x3, r9}, &(0x7f00000001c0)=0x20) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r10}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:04 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 18:45:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8983, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:04 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc04064aa, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:04 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:04 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000100)={0x4}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:04 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 18:45:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8990, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:04 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:04 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc0684608, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:05 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKFRASET(r7, 0x1264, &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffe000}, 0x0) 18:45:05 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:05 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0xc08c5102, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8992, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:05 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x200682, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:05 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0x9368, 0x6, 0x1, 0x10000, 0x1, [0x8, 0x7, 0xfffffff9, 0x3ff]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$IOCTL_START_ACCEL_DEV(r5, 0x40096102, &(0x7f0000000500)={{&(0x7f0000000480)={'Accelerator\x00', {&(0x7f00000001c0)=@adf_dec={@format={'Cy', '1', 'NumConcurrentRequests\x00'}, {0x1}, {&(0x7f0000000100)=@adf_str={@normal='NumberCyInstances\x00', {"0db4651701e32dd11a0c415324c6e0c7398c3d62e7903ca0ef7cff3e6f78c9873a0d7902effe669396c58348293a90cb4f17cbf70b081803ed4fb6a1beb53d3e"}}}}}, {&(0x7f0000000400)={'KERNEL\x00', {&(0x7f0000000340)=@adf_dec={@normal='NumberDcInstances\x00', {0x1}, {&(0x7f0000000280)=@adf_dec={@format={'Cy', '3', 'NumConcurrentRequests\x00'}, {0x8}}}}}}}}}, 0xff}) 18:45:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 18:45:05 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:05 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 576.870179][T22812] validate_nla: 25 callbacks suppressed [ 576.870190][T22812] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 576.888949][T22814] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 18:45:05 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0xc0a00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x6616, 0x4000001}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:05 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x4000, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f0000000080)={0x9, 0x1, 0x1, 0x6, 0x9, 0x0, 0x3}) [ 577.082579][T22833] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:05 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 577.138871][T22836] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8994, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:05 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 18:45:05 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:06 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:06 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0x0, 0x2, 0x7}) ioctl$DRM_IOCTL_GEM_FLINK(r9, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000040)={r10}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f00000000c0)={r10}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$DRM_IOCTL_GEM_OPEN(r12, 0xc010640b, &(0x7f0000000100)={r10}) close_range(r0, 0xffffffffffffffff, 0x0) [ 577.492620][T22870] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8995, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 577.545439][T22876] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 18:45:06 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:06 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000100)={r11, @in6={{0xa, 0x4e22, 0x101, @local, 0x5}}, 0x3, 0x2}, &(0x7f00000001c0)=0x90) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:06 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) [ 577.846949][T22899] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 577.899722][T22905] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x89a0, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_GETINCOUNT(r7, 0x80045105, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 18:45:06 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:06 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:06 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="b98033f760818aaf7ec7ccb85944a6a3e9657aef9404b9dcaabd7f39966ad20811acde9d0a45e8398008039b86b7c79a1cc6de72cd426e4915deb01f6017b851901b00732fbdb1212056a49ffdeec0370a7fbac4d4d27a61adf712555ebf9a9a903c6c967ca001d3c5fc1ea117fa93ce444999a027e6b4d80b7d0898f9b1e3dc13ef03466144e80cd7d9f1845c06f5dc2b", 0x91, 0xfffffffffffffffe) keyctl$instantiate(0xc, r3, &(0x7f0000000200)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '$(]', 0x20, 0x8001, 0x20, [0x0, 0x33, 0x64, 0x63, 0x37, 0xa1]}, 0x33, 0xfffffffffffffffa) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x89a1, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 578.188821][T22935] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:06 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) syz_mount_image$nfs(&(0x7f00000001c0)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0x6, &(0x7f0000000600)=[{&(0x7f0000000280)="af7269deb5692a0a24022febf6baf441cb9c17b9091438a1ac10657d69c924c307384f25a22cdd28a13dd640456fd61ceded4527893e510b6ed3131c48b5ac60f64af04a01518870f83c", 0x4a, 0x4}, {&(0x7f0000000300)="175d8795975819a6d71e891e798db52c92a35ef5c7f07b9859e110170669f163f7389313287ea333b62535203ba04f1542d04e2719fdcfe87f7b8a5995e3f2af82d37da1b0ed3d6cdcc27f041127543abde7bb447e0ccafb9ca75be1e7380ac4d208b7c77647ce80826fa74421d68e20279704fb2953646cdcd7c91bc596cf46c8a37681a67b45ec08fe3831c0976899cf81ab239d750035b3ab0ed29560e25326514f1cdbe5b0461429b7168d3fa0d83106d55b0c0cd1820b83fefd1d5b979c3b2f035f70fa8272fb97333479901d0c1bf0efcc7f", 0xd5, 0x6}, {&(0x7f0000000400)="0215ae0b164138ace54882c3642d2dfb4c11cffe5c058ff5497f21593a0fb9911c9751cc638b70ce5a1a8ac514ddb7974924c304b5625fa851378895625bba457d06796e5b438867872b8ef199760e6bf66d337e61c383045cec0fd704e3523e79b807cf6f88013a8572d9678a311c9e767ed5fb586a766c3920bd073cc47bc3d800395610ee84301fd06e4428f16edf756c0751915995f1d91554f42ee55b3218c21d8d444803929d89321ae5d0087530b5fe4f7c3d749ad46228e6db38e9f38c942f3fb0747e0318b62add51040328dcecf269382168934f07292827cf526dfe9233b1", 0xe4, 0xffffffffffffffea}, {&(0x7f0000000500)="a45e1704ae8d303a296e2ea4e5ffd7480ab931e3174067c0", 0x18, 0x3}, {&(0x7f0000000540)="5ced0a86005594b47001c7bc0a441bfdaebbb0792261a2607a88085608c9c199a54682786647c3364140d9f8653f8cf500d3718b8aef601c6e6c73e0f3e399fbe0c5846a410eb1bd80e6b545afcdccc7dabb7e41135b20c4884dc156685be2ea202c07ead9af52c0ba8952c2f56b16a29c6f7193", 0x74, 0x5}, {&(0x7f00000005c0)="c552c69426c6e2f5518d2cccf96f", 0xe, 0x6b}], 0x40000, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00') r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_names\x00') ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x7fff) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 578.253566][T22940] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x2) 18:45:07 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:07 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:07 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x41b7, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x89a2, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:07 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000001400)={0x2, 0x2, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0xcddc, 0x2, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000, 0xc10f}, {&(0x7f0000000180)="36933db9e8002806ad07c00a69166d794470841ca99e9658f9502ae92d773b019920d284a98eef59bf6624947e4cf402d5da8c85c54243e8dd54644ec3cf015726369ccb382ddee8d1173c1b80fd5f2f5b3f03163917ca0942cd7f15892d8a80782cb3db379b9e23eb24765cdf0e15d9b4af82da82f495a8f365b80e8999a4ea5522cdded66c41d6212d808edacdd982a1cc8ef55549080b6f1ee39605c360679ab326a654442f8957b751032a75c76f95948eaea9ca410a41aeeb", 0xbb, 0x13}], 0x830010, &(0x7f00000012c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d, 0x39, 0x74, 0x39, 0x37]}}, {@huge_within_size={'huge=within_size', 0x3d, '/dev/ashmem\x00'}}, {@huge_within_size={'huge=within_size', 0x3d, '/]-##-'}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x33, 0x6b, 0x67, 0x74, 0x31, 0x36, 0x6b, 0x35, 0x31]}}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x9, 0x30, 0x37, 0x32, 0x32, 0x30, 0x38]}}}}, {@huge_never={'huge=never', 0x3d, '/dev/dri/card#\x00'}}, {@huge_within_size={'huge=within_size', 0x3d, '/dev/dri/card#\x00'}}, {@size={'size', 0x3d, [0x32, 0x0, 0x30, 0x39, 0x38]}}], [{@permit_directio='permit_directio'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, ')\\'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/ashmem\x00'}}, {@audit='audit'}]}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x3) 18:45:07 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:07 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x1c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:07 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x89a3, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x4) 18:45:07 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) write$binfmt_aout(r1, &(0x7f0000000280)={{0x107, 0x0, 0xab, 0x29a, 0xd7, 0x8, 0x366, 0x3}, "5373ad056ea38886f2f5aac34d2c", [[], [], [], [], []]}, 0x52e) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:07 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x5) 18:45:07 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:07 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:07 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) mknod(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r9, 0xc010640b, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:08 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x6) 18:45:08 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x7) 18:45:08 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10200, 0xffffffffffffffff, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x4080, 0x0) open(0x0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080001}, 0x20008840) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r6, 0x3}) r7 = open(&(0x7f0000000280)='./file0\x00', 0x80000, 0x22) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r6, 0x7}) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x0) 18:45:08 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001840)={'sit0\x00', &(0x7f00000017c0)={'syztnl1\x00', 0x0, 0x4, 0xd8, 0x3, 0x7ff, 0x0, @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, 0x10, 0x8000, 0x1ff, 0x9}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000400)={0x194, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4040}, 0x20000080) r11 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r12, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r13}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:08 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x89e0, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:08 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x9) 18:45:08 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40400200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:08 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:08 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0xe002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xab00, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xa) 18:45:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xae01, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:08 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:08 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000003c0)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000400)={r2}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x200, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r9, &(0x7f0000000180)="714aabc5eeffb8e917def64a9c84005ca66ead7341dc8eb454cf3bbd87004d48fd55d788139e106bb8c1480abd6100f1461df2a83772ffbc8e365c84bbc4afdcd4271bc62b7b74340daca3b36f3b992bc0d33a25a2811a992cab196ea1088311a4245143d8abc2ac021024326ae5f91ccc7372af1e8401a756c8671b77872ea9f67c3a96", &(0x7f0000000280)=""/217, 0x4}, 0x20) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) open(&(0x7f0000000100)='./file0\x00', 0x662980, 0x24) close_range(r0, 0xffffffffffffffff, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) ioctl$F2FS_IOC_RESIZE_FS(r10, 0x4008f510, &(0x7f0000000440)=0x8) 18:45:08 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf) 18:45:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xae03, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:09 executing program 4 (fault-call:7 fault-nth:0): prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:09 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000100)=0x2, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:09 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x75}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x200000c0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xae41, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x48) 18:45:09 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x2bf4, 0x4, 0x100007}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)={0x3f, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000180)={0x5, r9}) syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0x5, &(0x7f0000000540)=[{&(0x7f0000000280)="daf57fd0266c7b1007c1819000c9c8d84f44072e1bbfe5195c62f38952dff41bd1bd03b36818a79a65caf62c64d11b573a4d3a6e0dca5a150e03551e52ead6820964f3e6591283914aa8f61003477896cecdb51a5ca9523f9904ee33a8be0067dfe700605aeeb87d49bf1c8a", 0x6c, 0x7fffffff}, {&(0x7f0000000300)="bf28143b783e4976f71be5f98b9cb9e1", 0x10, 0x5}, {&(0x7f0000000340)="4694ca87442298", 0x7, 0x2}, {&(0x7f0000000380)="fcdfff3de6fade0889b7fc30fbcfed0ea5900c2d0f19259fa88da19a100e264500ea182119e427e3c7e23a20a989d71e0262e8f255f21d28209a503cc09c881802a93f6e7f1a53f7de0ac6b089ee50dbcb99386c08aea38d5bf11cefa23e9710effdf5e15363d1192e2db906bbc37d9cc97dd984a1cf22e6ef372a3d2dd5d5e6921d6e6005a4e7ab0934fff9522d4b9b6a571b965156ce7fff7657", 0x9b, 0x100000000}, {&(0x7f0000000440)="cf982be8ac2e077a267f9b49d9c41c89b163477c693d273c022c3235ca7e3991e2a8797782450cbe4ebc8df4aa8ee66b2925c82587d8cb9025613a444754d7a73bc4d312f9c492a1eda3fdf1fa924a2a97065f9d81c340c58702440d2e5d223cb8e5a3a179d08bb262bf2c305764d071d91b0d7d6629be08bd736741a42467da611aa0516ff01508439ce1ec33f452e7cde58054cd2c68d0267cef58de8bd0dcc4fa3406825962073992782ca217205356cd91cf3d36ad446c4df0f605b4d7b9eb375d03468064b287198c21d95d37ad569398e8468ab610490c61008190ea2250", 0xe1, 0x81}], 0x8010, &(0x7f00000005c0)={[{@umask={'umask', 0x3d, 0xfff}}, {@nodecompose='nodecompose'}, {@umask={'umask', 0x3d, 0x9b0}}, {@umask={'umask', 0x3d, 0x7}}]}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$SOUND_OLD_MIXER_INFO(r5, 0x80304d65, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r10}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xae60, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:09 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:09 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r1 = open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x6, 0x10001, 0x4, 0x1], 0x4, 0x180800, 0x0, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r6, 0x3}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r6, 0x7}) 18:45:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x4c) 18:45:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xae80, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:09 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:09 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x200100, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x54140, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x5, 0x6, 0x8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:09 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x60) 18:45:09 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000500)={{&(0x7f0000000480)={'Accelerator\x00', {&(0x7f00000001c0)=@adf_hex={@normal='NumberDcInstances\x00', {0x5}, {&(0x7f0000000100)=@adf_dec={@normal='NumberCyInstances\x00'}}}}, {&(0x7f0000000400)={'GENERAL\x00', {&(0x7f0000000340)=@adf_hex={@format={'Dc', '2', 'BankNumber\x00'}, {0x46c}, {&(0x7f0000000280)=@adf_hex={@format={'Dc', '4', 'RingSymTx\x00'}, {0x4}}}}}}}}}, 0x1}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:10 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:10 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x3, 0x2}}, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)="1d5b370dbc1d723fe0b66e2d475c73fb", 0x10}, {&(0x7f0000000200)="de80741f54591f0c2a22210e8d37396d213f1febac2c929dc1d2a3d783ab275c1d56acb02741354a5f53f08f166feb5ebc4d1aea7b04bf36b483089fbf11795d", 0x40}, {&(0x7f0000000280)="8a3f4bbd72d5fbc3817c52b949e6ff28bd4af0b518d2539a4851fa5169f7771888d5ecab9297d19eb9cbeaa194ee8479bc9c1b2dc8401107b457bc4b3f0df99ec5d47da776098a94fc74d93fd710563421bcb0f02cbbf6c66d6080b16e1a55bfa3d2741c3f91d6fc2bc37d3d71c9e56a8d8bae759da48798ac58603bff04364205bf3e14b3362edccbcc70e3766fa5387a474db96407e636947538a1702c9bc3fc909958736c910e01327363ebfd9fced8792a4f701e804bda0517ba135f2b3657e873dfeb5f8b03edeadd11256c65b346c8", 0xd2}, {&(0x7f0000000380)="ea3439f21136f0ccda44df2f5b252610d4b92973ed741bae68466e38634d8d07b1f3ab496d32aef51e76e90d44996934621646c21458c4eedffe243d0691d83e266f8a1f2ae76a9165bb00a3591fef55e9a901a289e9adf749ab638db6a094004eca68630e8b707dab424c3ee3193e7fc4739511223bdc65c7fde069657e3d18fe40d1952072ba4910c47c76b9bea8c5693b1ab425499ee35f0a11527cd33f457a59eb3382", 0xa5}, {&(0x7f0000000440)="b912a98c82dca6a005c7c8c02793ec98cb7e1077dd06708a359d8682af2a07dcf98ba3344026fdef8d0624ee4453aa222ddfc5c4acff7ddd820045807f3f3aaa6c8a4b3e8ad9686deba5d45167ccbd8a0bedb42cc6c02b77a55ff15c1f74e9150d40f2bbd18a9851b798414f2baac8eccf64473bc4f1a43d7c9f392033ffd9bed7e8f6d99397bbac44ba22bc66c969bcb13ce928eefb07977bbe8942651499a26f541d7896259e0261477d185664558bd084a7acd0ecbcb0288d80854eb146ca4ef55b8acfecebf4533e5a7ed3", 0xcd}, {&(0x7f0000000540)="cac52dc743a34ff303cc1255229b99efb7998720b522f01314c2c14de8dabba1493981c6676fd77a1803836b", 0x2c}, {&(0x7f0000000580)="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", 0x1000}], 0x7, &(0x7f0000001600)=[{0xf0, 0x1ec, 0x9, "59ddd2e32e5ae60da1da3cea8229c4047cc0d985965e15949a3489e55bdaea977d6f758aba64b615eccfc160495280ab1ef9b11040b21b57b52797af3ac093746e1dd9c5cbfcf940f94f9b0d231e0b773db2ff0c4f040b20e94a6360457c6fd937e2cfd1ae88b25f98a96118d69cc25d4fcaa888a93f49afbf6629e495ba8395b09d80f5de453c079e8d135184df64bac08068356c24c0eeb1f0a44b21f8b66a3042f0fab3b0aa81d144d3d2611fd8eb74449f89848dcb94d352eeeaa91641f679ecd4bbac80148bd1d54d19828810c2f60046d9d5a6793d3e5a4ce1df"}, {0x50, 0x113, 0x1ff, "502c36cd9fd8243588194c3234c404136d94d6a1aae3d8b5b6a941c864eca3dd66cf6a0084313cac7cd78b72264b2e5d16204d5108b502ef16cc"}, {0x98, 0xff, 0xfff, "c3968e072ec79e54c0e33064190ee524d095a3dfdba1531272a94d56ed958cc853441b403a2429cb44d5f92884d6ac7f68ad63960d349697c05c05082114027e3f6c4cdc8dde07ec47707c02db6e2a2c5b4eca2f7588f57391ad12182a649bfce2ca6b5a5294b333d5239d345e093569564b37e641d71e8a8ca798daf2772126d7b0ea9d3dc335"}, {0x110, 0x10b, 0x2, "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"}, {0x60, 0x0, 0x101, "c576953955f756aea2afbf71c56e63095a213e773a37c6802121d5e55509784c6cb46d2b4232c187cb997c41f8d04bd9b5d22ed9c5b7854f25a1406c91ac204191171aa75101baa7e96345"}], 0x348}, 0x80) r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:10 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r6, 0x3}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, 0x0) r7 = openat(r6, &(0x7f0000000000)='./file0\x00', 0xe080, 0x8) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="f2670f9a58d78fc918028803000000776d0f0fb30c4e0000bb0f30b8000000000f23c00f21f835030003000f23f8b8020000000f23c80f21f8350800d0000f23f82e0f01ca0f0174946f0f01cb", 0x4d}], 0x1, 0x10, &(0x7f0000000180)=[@dstype0={0x6, 0xc}], 0x1) 18:45:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x40044581, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x68) 18:45:10 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:10 executing program 3: mount$9p_tcp(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x40006, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c6e6f657874656e642c6e6f657874656e642c76657273696f6e3d3970323030302e752c736d61636b66736465663d2f6465762f6472692f6361726423002c61707072616973655f747970653d696d617369672c66736d616769633d3078303030303030303030303030303130302c6f626a5f72692f6361726423002c00000000000000000000000098aa342564429c33634c64326903ae22bbdc30911bf1b30b3897ac0d05eb75b3eb750ffb187e36700ed4b10a8d981fd0700802a4ccc7611b"]) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000280)='nfs4\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000300)=[{&(0x7f0000000480)="bab7e65e962b2440ce2e09fbc71fe04cad676c7a39d23cd05969fb6f28ef39a144fc8ccb23d9710abd09bfc44b4baf4eb8853590fbf9b1d1addd95ac8c5f1b25d455a5faa5a8e7c79e3d5dd6bd01d1d1dabeae4d8ac5bd9b9d308799361f746fc6002f3d4bbb20ea622c46443d971152009fda80a12cf5f25aed65d246304e4efe7cb3936c037194a7a99929488c580fbbfa179e37b509d6443281a5709ec6b533b87e1fab924abc0a25bbf1f5d32b149680c8c138a159673303041c715a3e75653ff0b1e7ee3b1ef6cbe428a918dbbee4edd2dd3ab05fe63dc5c91b6ef89fccf73e11", 0xe3, 0x7}, {&(0x7f0000000580)="f97e709c49e10c561a133f13edc45396c151f6b90e49682c3f256b00f5a0042e5af8287bd4364c60e3045bd14fb0ad606d217cf624f096a9ba6c9a4f9295e99b4f18d35c05a9e426d46e8c1cf470143a37d19494b320d7d46603e93253ad25adcc5ff58e9922b5195e6a52680387c0f08ac86232b1f0ccafe365ef23f4f6782120381d84cdf6ce4445cd69a748bba9", 0x8f, 0x1}, {&(0x7f0000000640)="dce045730cd63fa02d2f318b00acaaba31da35cd6e81ec5eb342375025a911acb871a18c28fb5d7e265d0e6af9adc61180565048d44e3bd5c06d509218ef0b21c314ab70706ba37c933b788c847c8b32798a917831e44db597886533df5f33d8cd39fae9119d20138894e43f13fa94a7f36ad1ce67709ae45f9938b3161bd06e464ff24e768c78202e5745e30dd2e9a06459e0", 0x93}, {&(0x7f0000000700)="a30ee39e8bd04fcb9753122f835a3e45803d9284f8c8bd5e0ad51e5b642c3070d8e9759fbb3136d2e7742ff7821947de7d003c3af0cd551546567ec48332ad888928787c7253d99b77f49676a9d2b5caeb52e7437e5f5838291d372bf34e5f73914827562611f25a0f69a7dbb206c56853abce65f3c1181170406cbda8ec7ec3dbbdea1cd27f0fd6d5db7656498a9c1119f551f77aeb6b66bf2b52e697fbafadf7448a6d1c8d11b0939c04f5389e0206b28e292a410cc09d944c9d665dfe6af80dbebcd2ca8aaf2d1dfe7ba378f45e31b2adbf376eeed3e5d8329e1a746545093954dedaafc85f718a7c60b12da5091a", 0xf0, 0x38000000000}], 0x2800000, &(0x7f0000000800)='\x00') r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000200)) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000100)) ptrace$peek(0x2, 0xffffffffffffffff, &(0x7f0000000840)) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x400448c9, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:10 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000080)=0x28d) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r4, 0x7}) 18:45:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x6c) 18:45:10 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) 18:45:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x400448dd, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 581.919506][T23263] NFS: mount program didn't pass remote address 18:45:10 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:10 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r9, 0xc0186419, &(0x7f0000000200)={0x0, &(0x7f0000000100)=""/159, &(0x7f00000001c0)}) close_range(r0, 0xffffffffffffffff, 0x0) [ 582.004070][T23270] validate_nla: 16 callbacks suppressed [ 582.004082][T23270] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 582.127914][T23281] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:10 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x74) 18:45:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000680)={0x0, 0x0, {0x1, @struct={0x80000001, 0x7ff}, r2, 0x0, 0x0, 0x40, 0x2e, 0x4, 0x432, @struct={0x1ff, 0x4}, 0x1, 0x100, [0x95f, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0x6]}, {0x2, @struct={0x9, 0x7fffffff}, 0x0, 0x35b, 0x401, 0x800, 0x6, 0xa5a2, 0x9, @struct={0x7, 0x3}, 0x9, 0x0, [0x877, 0x4, 0x4, 0x0, 0x3, 0x3ff]}, {0xffff, @usage=0x1, 0x0, 0x2, 0x0, 0x1ff, 0x6, 0x89c, 0x4, @usage, 0x2, 0x1, [0x400, 0x7, 0x80, 0x0, 0x3e00000000000, 0x7]}, {0x7, 0x8}}) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000040)={r9, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={r10}) close_range(r3, 0xffffffffffffffff, 0x0) 18:45:10 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[&(0x7f0000000100)="daab759e98599e4235a5475c53ff04fd7538ceaaceb801e729491241fb528fef91abd9021e5aca372a62c4106386667f8147a9bcfb8ae8a9e2b014098882aa20ba68f928ae15ff1be354e00ce357f19ccca70422395be078cdbae527a56aaec9882624cdc251abb408c83c419afa62102ba317e9f913c1c698ac8fe43eed582ed51b685e7f4e5f8bdb1a541f47a538b5f3df20723a8316bd78c4ea72078c26575f1771ad0354f5ace4676f57670d3828704e96f86fe14939536dfac2908d9ebdb083bf8f3e6d01078cc7e6fae80331c99b50c8eaa5d5ce1bdb96e5defea3d00cf30d4a3ba1554221f8f8b73508ffde6c67ac9b1841c1", &(0x7f0000000200)="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", &(0x7f0000001200)="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", &(0x7f0000002200)="5eca2f1b31c093bee26f457224564c13f229d6229352f215bbbb864a6d429e80212fdba652975db545de33d0ec6017ed4d538cb5a13d64719bde14e6042c4be53a78388993e23ac09277e0db616a44b0595813e6c89bf0b67f856706a998a02aae5d77f8dddff71b5f05b65f44f248097d5bca9f6fa287b5ea61fd86d9857a8cd70f0efde72633d2672694744cc69f1d5100139e25e917b3f0a8148d609bc0504301a85caf71b6521eddfac4bdb9d7ef6976a0ddcdfb6746659fb2c9db011b90668f9f835510fc059f60fee53b14f3d7ae"]}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002300)='/dev/nvme-fabrics\x00', 0x6804c0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000002340)=0x400) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 18:45:11 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000080)) msgget$private(0x0, 0x420) 18:45:11 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x400454dc, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 582.451333][T23306] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 582.500427][T23311] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x7a) 18:45:11 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000100)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)={0x100, 0x2, 0x4, 0x4, 0x80, {0x0, 0xea60}, {0x5, 0x8, 0x0, 0xff, 0xb2, 0xe5, "c3372793"}, 0x80000001, 0x4, @offset=0xb547, 0x0, 0x0, r4}) r6 = dup(r5) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000200)={0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r10}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:11 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) r3 = syz_io_uring_complete(0x0) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000080)={0x7, 0x401, 0x81}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:11 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0xffff6d8d, @local, 0x16625697}}}, &(0x7f0000000000)=0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 18:45:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x40049409, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:11 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 582.812581][T23341] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 582.885510][T23347] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf0) 18:45:11 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r6}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = socket$bt_rfcomm(0x1f, 0x1, 0x3) close_range(r7, r8, 0x0) 18:45:11 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4004ae99, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 583.090310][T23361] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:11 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x11) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r2 = dup3(r0, r1, 0x80000) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000002140)=""/241) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) [ 583.217249][T23373] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:11 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x101100, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x240b01, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x7, 0x4, 0x88}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x159) 18:45:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x40087602, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:12 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:12 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x300) 18:45:12 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x9b) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4004810) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2f, 0xb4, 0x9, 0x101, 0x52, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0xc6, 0xb80, 0x80}}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7000ffdbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099003f000000040000000c009900090000000000000008000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="d3273eee3d7c3db648465292e67612fb4000f343bcc8bb37319e9ab90c0692e160121890930f4eae874edb9666d9ca4f63073dcddc072c3133c9491c27801f7a3d9b91069409cc1d9b839c4dcc6d9ba80dda8ede80761b5c5238e0d11f81e315655ac464e12646bc2af5d9a89af37aab6985a3809505b582b4f1b0876c6d5d19dab54ecc36866eb68a49d4bce47ca9c479e8412b9f94b22b5c377c1ce4b07ce31944ad10ef62060329af10bc9ba6799e2525fdeb713d2aff3d"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 18:45:12 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x461, 0x0, 0x0, 0x7, 0xe2a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x240002, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r10, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r10, 0x7}) 18:45:12 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4008ae93, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:12 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000140)={0x5, 0x0, 0x100f, 0x2, 0x10001, 0x1000, 0xffffffff}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) [ 583.759600][T23411] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 583.852108][T23421] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x500) 18:45:12 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400204) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000100)={0x1, {0x400, 0xffffffff, 0x203f, 0x9, 0x653c4ed5}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read$FUSE(r5, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000002440)=ANY=[@ANYBLOB="d0000000daffffff", @ANYRES64=r6, @ANYBLOB="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"], 0xd0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r9, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r10}) r11 = inotify_init1(0x800) close_range(r0, r11, 0x0) 18:45:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x401845e0, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:12 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x40186366, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:12 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x100, 0x0) setns(r0, 0x2000000) open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x408100, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xffffffffffffffef, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000020601020000000000000000000000040900020073c28132000000002c00078008001340000001000100140007000000060004404e24000008001240000100010500150081000000050004000000000073a36f0a3225000000002508d397d5ab8dd9591c9d59cc8ae06b20e0811d86f26bd94c561ca94cda818bfddddd947ddb22b2a8778cdcad0b417f1d37734d481d06eeb47c8bf56bdae1367e3b126ba552434322ebe8657148aa398647285019d9e5070d3ddbc7046916f8d82dcbc80929936e2f7cd91cdcc81ea8b2810bf92470a8fa52e66a34aff9d44fd99fdbb84862"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4a820) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r5, 0x3}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000000)={0x1, 0x0, 0x4, r5, 0x6}) 18:45:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x600) 18:45:12 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x10000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101240, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x4) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000080)=0x10001) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 18:45:12 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4020940d, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:12 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800041bf, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) r2 = eventfd(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x2, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x700) 18:45:13 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000000)={0x3, 0x2, 0x10}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000080)={0x3}, 0x4) 18:45:13 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000001c0)={0x1, 0x0, &(0x7f0000000180)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000200)={r3}) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000100)={'batadv_slave_1\x00', {0x2, 0x4e21, @multicast2}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x3b, 0x1, 0xffffffffffffffff}) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x81, 0x280000) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:13 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4020ae46, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x900) 18:45:13 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x19, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0xfff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000100)) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:13 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) eventfd2(0x401, 0x80001) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4090ae82, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xa00) 18:45:13 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000080)={0x8, 0x7848, 0xd58}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) syz_extract_tcp_res(&(0x7f0000000100), 0x2, 0x4) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x1, 0x0, 0x1, r2, 0x7}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:13 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:13 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:13 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000100)={0x7, 0x5}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x4400ae8f, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:13 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xa9b) 18:45:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x80044945, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:14 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:14 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:14 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x5, 0x8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r4, 0x7}) 18:45:14 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, &(0x7f0000000000)) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xec0) 18:45:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x80086301, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:14 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x80108906, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf00) 18:45:14 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r3 = open(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = openat2(r3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x1431c0, 0x14, 0x2}, 0x18) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000000140)=""/96) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r7, 0x3}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r7, 0x7}) 18:45:14 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x2401, 0x3, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000280)={0x5, 0x7}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000002c0)={0x8, 0x4, 0x9, 0x1, 0x80000001, 0x2}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000140)={0x8, 0x7, 0x8, 0x3, 0x31}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) 18:45:14 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x80108907, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:14 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x2000) 18:45:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x80404525, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:14 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1f0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:15 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0xc402, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) acct(&(0x7f0000000000)='./file0\x00') 18:45:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x3f00) 18:45:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x80489439, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:15 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40046f41, &(0x7f0000000080)={r10, 0x7000002}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={r10, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r11}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:15 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @read_remote_features={{0x41b, 0x2}, {0xc8}}}, 0x6) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r4, 0x7}) 18:45:15 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x280, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x4800) 18:45:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x80585414, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:15 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{0x0, 0x2710}, 0x14, 0x8, 0x5}, {{}, 0x12, 0x4, 0x5}, {{}, 0x11, 0x81, 0x80000001}, {{0x0, 0x2710}, 0x15, 0x3, 0x8}, {{}, 0x1f, 0x400, 0x40}, {{r4, r5/1000+60000}, 0x16, 0x7, 0x7fff}], 0x90) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x61, 0x5, 0x8, "9ac5e4543c541b1035f58383fb474324", "c76fa4f881003c82520e09de34c8e92c17f5fd700b04c06f444af89b979c3a76c731ddd1162458d133d8f06e67b12d5cdc70fa638236708404b71baeaed85afaa17e5c595713ebb18734a2a7"}, 0x61, 0x2) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 18:45:15 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000000100)={0x2, 0xfff, 0x0, 0xffff}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x4c00) 18:45:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc0045878, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:15 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:15 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf71, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0), 0x4) syz_open_procfs$namespace(r1, &(0x7f0000000200)='ns/cgroup\x00') open(0x0, 0x2000, 0xab) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r6, 0x3}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r6, 0x7}) 18:45:15 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x3943, 0x565, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) [ 587.058989][T23689] validate_nla: 17 callbacks suppressed [ 587.059000][T23689] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc0045878, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:15 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050006000000000008000100", @ANYRES32=r9, @ANYBLOB="7de947cbfc0f1a78089a10be275048d109c3a2cc4a44ac60cb6d2f9ea5e05379798c2892f58f3d061b57da8e71578d5bacdf118041d0878028097e7ae5d2584cf012929b376188355f9b91602ea4a3d68adafcc847d75be86fc2615157ab73e2a65d7190c02d3cad7c37a45add33ece68bc2cbd515ac79399ec32ac68d961d8c0d22673a2589c10ad3281878907236799ec457775abceb619aa986411a6c925a4b56c3884f03a86d35785b84eef697080dc3f27d73776d12af2e5d05aa427dcf1c81a131f1105260ac2a622cecde182595f3b485199a23", @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r8, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000007d8161795c4513ff93a4a8ccf9ba4428af5620c1223233c4f363d950365aefaf2f2915a8e584921f17811a78e2a181c14dee60fc495c93990f2f68b652ac8df4e08fff275a5940ad2202c3d650498cc832740e8a885c3d65451736a7fdb9f6bd28c2b2903dc60fa6cece11aefeda602d68e2c9ef947ee649c5d2a34190577750a200c0ac9b1454ecea8356f65489f91c021cb1bd1a4939c71d729c8e6a773195e2196252fe6abef73c502ac786ea31bf0cf966f1fe57d6b6c022cc842654c8b2f5ceb3bc7edcea4c49f8938c0fd3c6b3d2a72934", @ANYRES16=r3, @ANYBLOB="000027bd7000fcdbdf251c0000000c00990000020000040000000c009900d30000000100000008000300", @ANYRES32=r4, @ANYBLOB="0c00990002000000ffffffff0c00990003000000040000000c009900050000000200000008000300", @ANYRES32=r9, @ANYBLOB="0800010004000000"], 0x68}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000400)={[0x5, 0x1ff, 0x1000, 0x10, 0x7, 0x100, 0x6, 0x2, 0x3, 0x80000001, 0x6200000000000000, 0x101, 0x0, 0x2, 0xffffffffffffff68, 0x81], 0xf000, 0x2800}) r10 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r10, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 18:45:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x5901) [ 587.181075][T23703] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:15 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:15 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000100)="6a08a2eba78e674b83185cb6ae4ca36c99f38e9357517494b305764db0a7b0b8001231f39f00e8d7140f9a45efe50cdb2a162507d674d44266e1dc70ab217ac58b137266d2bc4259f902ff66accd433df4594680919840782cced38496e0b0d1739cee8b129ecf890ba284495eae0b67ac0daf4e79c40b843c4676cd3658fa4d64231ad048e01510cd8cfc553225931e173b95304e36f73dc1c070bb985d1f1fa249751a1137671413c3fdd6e474307da52bca9edcd521da88a87ca0b5e1b53870f50c8f4fcdfe2fff6780cf318dcb895a41d16d2e75eda2ed295d2ed74db36489eb5d0b62c68d11003bb50de7fc8ecc2689", &(0x7f0000000080)=""/31}, 0x20) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xa6a80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r4, 0x7}) 18:45:15 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xa0, 0x1, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x24, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe6}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x3}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x9f}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ID={0x8}, @CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x81}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xf}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9544}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x20}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc008ae67, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x6000) 18:45:16 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 587.489027][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 587.555150][T23731] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:16 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) msgget(0x0, 0x28) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000240)=0x1) r6 = dup(r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="e0ff00b2", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf25030000002500070073797374656d5f753a6f626a6563745f723a67657474795f6574635f743a73300000000014000200fe880000000000000000000000000101140002000000000000000000000000000000000014000300ff020000000000000000000000000001140006007663616e3000"/134], 0x8c}}, 0x45) 18:45:16 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r5}, 0x8) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) fsetxattr$trusted_overlay_origin(r8, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc0189436, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 587.599889][T23735] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:16 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSBRK(r3, 0x5427) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x6800) 18:45:16 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xee23, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000080)) r5 = dup(r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r7}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ_RESET(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x1) close_range(r8, 0xffffffffffffffff, 0x2) 18:45:16 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc020660b, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 587.895125][T23757] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 587.980326][T23765] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:16 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xf, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x4000a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000100)='ns/mnt\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:16 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x48081) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc020aa04, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:16 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x6c00) 18:45:16 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x900, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:16 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r6, @in6={{0xa, 0x4e21, 0x3, @remote, 0x2}}, 0x6, 0xad50, 0x1f, 0x5, 0x42, 0x9}, &(0x7f0000000000)=0x9c) r7 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r7, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) [ 588.285445][T23780] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 588.330223][T23780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.331350][T23796] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc020f509, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x8, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) socket$inet(0x2, 0x5, 0x4a20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETFB(r9, 0xc01c64ad, &(0x7f0000000100)={0x8, 0x80, 0x0, 0x200, 0x9, 0xf1c, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:17 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 588.378668][T23780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.608290][T23796] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:17 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xb00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc0487c04, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) [ 588.650243][T23793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 588.683315][T23793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:45:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) [ 588.718659][T23793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 18:45:17 executing program 0: msgget$private(0x0, 0x51) prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = creat(&(0x7f0000000180)='./file0\x00', 0x61) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x30}}}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x55}, 0x44) open(0x0, 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x7400) 18:45:17 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001400040026bd7000fedbdf250938c000", @ANYRES32=0x0, @ANYBLOB="14000200000000000000000000000000000000011400020020010000000000000000000000000000080008000100000008000800000400001400060004000000010000000400000001010000"], 0x64}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) mlockall(0x5) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:17 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc0585611, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:17 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @multicast}, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x9, 0x12}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x2080, 0x0) r5 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) openat$cgroup_devices(r2, &(0x7f0000000180)='devices.deny\x00', 0x2, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x6f5c06b0f532e962) ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000280)={0x1, 0x800000000000000, @status={[0x8001, 0xe3e80, 0x5, 0x9, 0xe1ee, 0x1]}, [0x10000, 0x7d, 0x2, 0x0, 0x10000, 0x6, 0x20, 0x6, 0x2, 0xf52, 0x80000000, 0x1, 0x5, 0x2, 0x0, 0x1000, 0x101, 0x4, 0x101, 0x59ce, 0x9, 0xfff, 0xbd3, 0x8, 0x4, 0x6, 0x100000001, 0x6, 0x5, 0xffffffffffff119e, 0x401, 0x7, 0x0, 0x1, 0x20, 0x2, 0x0, 0x2, 0x1, 0x3f, 0x6, 0x3, 0x101, 0x8, 0x100, 0x7f, 0x58f, 0x3, 0x9, 0x4, 0x2, 0x4, 0x2, 0x1, 0x80000000, 0x100000001, 0xd6, 0x1f, 0x6d, 0x2, 0x7, 0x17, 0x6e2d, 0xfff]}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r8}) [ 588.960343][T23835] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 589.003514][T23839] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x7a00) 18:45:17 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0xc05c5340, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="3b00000002"]}) 18:45:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:17 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x800, 0x5, &(0x7f0000001380)=[{&(0x7f0000000140)="a1e1317353f98c7a62dd48e46162143acc31de443cc2fd49c3713b3f9ac7d1622b13cfa26ccf0fb6a7d1fd6482f42b7730da5c9a26e00896cf2d7ace539ab8", 0x3f, 0x7e4f}, {&(0x7f0000000180)="0500037f994142f5e6094ad16202e9ad41a720c08cd1214773ef7a533674e319bddb6fea54715c376b24f76f3d4839db941a3a78af050024721cca3dc6f9df4aeddfaf2fb947c7c050ce1e0e2959bc58fb781d627ac2a3d484f30c04370ebca8cba10100c61ff84a08efecb88ec8c8bde55e9ef339c75ab52e793483d3308dfb2dfdb0d84202d9cf89d717eff737051e495aaa6e73aeb6", 0x97, 0x9}, {&(0x7f0000000240)="46c575f3b605c55b2b20dbb269b629f1d4cb353473fa37a87ec6cd84efeeb23450ae2768ebace15bfd44e01bb0bd90d6e766cce2ee59ad06c7afb90b3609768c96cd8a8988e00b359f8730c93c2fea82222aa9af6b40270d5ab02903b6bcd5984439a21b6f95d03d0891eb9b560b2c744d97a2e9d5430f0b71eaae9d0e7d66661eea7ab162e6a5b078e0131e350a9a0144bf62466b06c5f0321112e6e1", 0x9d, 0x7}, {&(0x7f0000000300)="ac40036e4edb056c9cb2f639a6dfe9a3ec1653c040b58b39e1552f868115ab1018ef1eec99dd60b9aa21ce992cfb344751aa09be0eee8885e801d662ad79418b34f96b33a29abaafcfd50276592f", 0x4e, 0x9}, {&(0x7f0000000380)="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", 0x1000, 0x6}], 0x1202080, &(0x7f0000001400)='ns/mnt\x00') futimesat(r1, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={{0x77359400}, {0x0, 0x2710}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x9b0a) 18:45:18 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000002"]}) 18:45:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xc00e) 18:45:18 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000001c0)={'veth1_virt_wifi\x00', @random="95b28cf9c9f5"}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b}) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000200)=0xffff) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$VIDIOC_ENUMSTD(r6, 0xc0485619, &(0x7f0000000100)={0x80, 0x0, "96ff558955b1a76677fdc9968be69aa75b9a4a65a9ace0d8", {0x80, 0x6}, 0x4}) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000280)={0x2, 0x3}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) ioctl$VIDIOC_QUERYMENU(r6, 0xc02c5625, &(0x7f0000000180)={0x2, 0x3, @name="a068463a8dc2d9cd0e65090920095870114be657fb5d4a7f7eef696c63649284"}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:18 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xe5a, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:18 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000340)={'caif0\x00', @dev={[], 0x11}}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4) r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0xf2b}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x649}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3cb8f0a0}, {0x6, 0x11, 0xe9}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000010) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:18 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0xb) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x20000, 0xa4}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x8001, 0x800d, 0x8000, 0x9}, 0x10) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) fsetxattr$security_evm(r2, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0301040000573500343c05b4e4eb02e8010089dcfdec0c26d7d67d46b6176fb8232797b4ec4406e3f04fa174330b3c77df2f71123cfba37d70befa3daf9382c889ec4cb74b51aa0bb721e0851c31d70c1595a26c183064f8f1e7ae103057e3a60a11bd6e0f20c5a56afebacef54f31d87c940907338efe3de0844891cff1e1403918e97354ef82ab0a631e8514ea90959930d9dc8cbf941e84e13b38f26915a2e0e57ce54ba5a0e9cf2fd6228817659598d431e9c02e2df9"], 0x3d, 0x2) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r6, 0x400454ce, r8) setgroups(0x4, &(0x7f0000000340)=[0x0, 0xee00, r5, r8]) 18:45:18 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, 0x15, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0xff}, [@INET_DIAG_REQ_BYTECODE={0x9a, 0x1, "fa33fd968f9832e6eef82925438da7c48b0468efa7e6bf2d29884213b464b9da8ea868e2b477bcf495b8a7b9b6a62b6b81a59f88cb829dbd305ec552674ac536b6659cb4e466fd236d7cd58bcc008e20139e30f9f71bc799e6cdd66665f2e59761d5230978f4a38593ca41fb14c0a8d50035703e3d14c30fce5d4ca26d210b6f7d6d98552007cab97af3054f3ff0aa9a4d4d3604d638"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0x1000) 18:45:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf000) 18:45:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000002"]}) 18:45:18 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x34000) 18:45:18 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2102, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) 18:45:18 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000200)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xa7, @dev={0xfe, 0x80, [], 0x38}, 0x9}}}, &(0x7f0000000080)=0x84) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='silent\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) 18:45:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0400000002"]}) 18:45:18 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1100, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x400300) 18:45:19 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$phonet_pipe(r1, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x80800) prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r4, 0x7}) 18:45:19 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000100)={0x2, @vbi={0x62, 0xfffffffa, 0x4, 0x38414262, [0x3, 0x11a], [0x3, 0x9]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000000)=0x2) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r5, 0x3}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0) 18:45:19 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000002"]}) 18:45:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xe0ffff) 18:45:19 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x8, 0x6803) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x200000, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x40200, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf0ffff) 18:45:19 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x200000000000, 0x20002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) syz_mount_image$bfs(&(0x7f0000000180)='bfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000280)="4e432b5fac8301d8d28158c90156037470ca8beb5ca144e014a49fb2959b873194b7f05211632ecf5e1ddb042cac79da2af6d00939a55c032dfff76f0fdb3d0f9ff120fb13143a3c3dae4df6350657efc10e6386eadb92003fdd94ab9a857fe57424c7784bb9dfdc6aa2aae7364626150c1e0a64e2b35dff17dfab3d1c3fed2d304e69fecd2d304eb6151c61120fe6aec597617fdcef6ae3995939831fba8356cfd169fe580aba4200d3516524a5f400", 0xb0, 0x3}, {&(0x7f0000000340)="509738c21ba181f5db2fa46ea7a6cf4d1f1a8434fbcd769257efe38d1da61484f80c4b02d0f833382b9be387dd9c558ffa88bffc7ad45ce02634b6ec5aa3876564ff2f9e0fd34f9ac7fa55311c19d221e2708c83bfe52264f95b1b29b82ba5ba5cffeda30cb6b6e48bae49e297cc1f9fae14153c181dca0398d2b5b92a533012c456427a3ad8d518e6dcfc3d41853ceebbd08232f6a9e0d37b342fb443f90e09dbd08c8b07aab75586537ca8", 0xac, 0x2}, {&(0x7f0000000400)="5772ec247c49bda6035d1e7c3884a27aa1b8f65d75c4eb8012e5667b635978b853b584be4dd11ca88228320ac9f49f6575243a5a8c20d5d7081c4bb008a6d83b4510be0592941f3dae00223c097ba09ad5ae64c3254d6f7d32821432e1be750c5f31a2e394595f2d6d5692c58082d693a991ac73383761ae5b2c0ece2055474eb88fd290f274564e544fe04034f4bf7849e19503aac9ba61a665dead627c8d03383dedc036c7d41613bc176fa0b2f0825382dcae6c99c5c3014b923370727aaf8f4e681849456978697e684e886c1daa213d8935735e7d6be012b07d991c5ae091129a97d4ed04d2b6759ff367dd", 0xee, 0x2}, {&(0x7f0000000500)="22be608e61c6fbe6db5c28558d5eae2bc551de68047bfc2762a0dea0ed0d73561001aef815c04d4b97a17d7fcd647037a0bbbc8a4b8ac27e905970286391c1cdedc23ca3963c6d4606a2ed5bab2a92494e2f395ef3f7ddb047836ce7df953dea07b9e7b5faba0218731d4a820cf48bd9316b79e215357232f99d21497b718f10c5a8c82c3b83c2143698f3f5bba09222fd", 0x91}], 0x3001, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000640)={0x0, @ctrl}) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000140)={0x1, 0x3}) openat$cgroup_ro(r4, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000000c0)={r6}) 18:45:19 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000002"]}) 18:45:19 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r2, 0x0, 0x0) getpgrp(r2) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:19 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') unshare(0xca0fc4a16b4ba954) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r5, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r5) 18:45:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x1000000) 18:45:19 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1400, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000002"]}) 18:45:20 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x4, 0x7, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:20 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x5}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x2, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:20 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1500, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:20 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r9, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000001c0)={0x3}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r10}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x2000000) 18:45:20 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1600, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0800000002"]}) 18:45:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x3000000) 18:45:20 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) bind$inet(r6, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) 18:45:20 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1700, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:20 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x3032c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x0, 0xfffffff7, 0x8, @mcast2, @mcast1, 0x10, 0x80, 0x1, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'sit0\x00', r1, 0x2f, 0x0, 0x0, 0x7fff, 0x0, @ipv4={[], [], @multicast1}, @empty, 0x80, 0x80, 0xc6e, 0xda}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qrtr-tun\x00', 0x2068c0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r4, 0x7}) 18:45:20 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = open(&(0x7f0000000100)='./file0\x00', 0x98400, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r8) keyctl$search(0xa, r8, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000001d80)={'syz', 0x1, 0x2e}, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:20 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x4000000) 18:45:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000002"]}) 18:45:20 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1800, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:20 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x5, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 592.284212][T24104] validate_nla: 18 callbacks suppressed [ 592.284223][T24104] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 592.413833][T24117] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:21 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) bind(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x9, 0x0, 0x0, {0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}}}, 0x80) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:21 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockname$inet(r3, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r6}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') close_range(r0, 0xffffffffffffffff, 0x0) 18:45:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x5000000) 18:45:21 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1900, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000002"]}) [ 592.674724][T24136] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:21 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x6000000) 18:45:21 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0, 0x1, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x455, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000180)="adaf1bae84edd41c6ae853a482e913ca805b9c2584db18e0a36c0b01a5e0a616ef68242a5927f7ff9a5f596d7db68602f4db3fd7bbe42456162e20c81953ed0139ad897e34c0d24fde0d89adec334ee2ef7ce9d16df8b08f18cee0ad740c1794efbb8a043ed4d67862bc1d24ba63da652786707a09f124cdd3bbdd06fcc62649fc794c4421a9331b6c7522e3140871831cdb8fbb62e93011", 0x98, 0x1}, {&(0x7f0000000240)="2d158007005da702cba3b4f6e84e090acbe52e91dfbc88de607b19337c4c333fd2fd92970514cf328f2701fa99ea9f4a5eabeead67c446dadbdb67d1ccca636d3914ea1b26de9ba34fc63a22cf80253477626551fac33ec4", 0x58, 0x1e3}, {&(0x7f00000002c0)="b151aa127ac41dc78a726d617e7458baf0e456362ba495f162ef810ff54596aa122c6dbb62bb022bc13f6b71228726c673fa0341f4e32931367900c1447270468b53d46c81869bc77edc649aeb2294faf943534db62fdef89ccef1ff2305ba5c6056c55f543319ca0c80ba9031c6b8c69e2483332a7f457d5fe0d00f343a00714609e4770b5efeb90ebadbc1e53bfbe7f14e24e6d25eb5926af70716ab63435239d5fea5f293141e50077bbeed1e60f512abb966560ebed88543e3d452f7a448c9ea70ed71c9c455f932ffa777c602d5a73bdda82bd36579c7560a7ee12396732cf339d0460b209966174729dbad55cb4ed79ba4589fbafe2678467053a26042d68df755ca1d014bd1113e2ed2eaaff301305bd1e84a91600d334d39096a25575b1031897eaa99a3f75c5184fcff15a97fa97c0875a6ab4564c769f5cc430f37ad87067d797f9550d8cfb0c9cd4a9cdcaf5ae1674e3c3a3ace8765266484d04315a7c84021d399c64c4051db12ed8515f885dba07735d686d60d259a3647b520ebc97eaa2a2a19a4d7cc5d8796362fdbb01ec4c99c62742cd9d7d32faee775a9716f83e4b9213cc31c18e33a648e53bf3c0b42f75682ace2fffd7b87d5820d1b8016e98d3cce717bf5aafe47afb71f2ab943f461113e9c8033002fc6cdc0c27b22ec5c87db4640da9caa6a13ef65407103e7562200584ee316b346ab8209c2d6d24e3442a723426ef40ec7507a1f888fd3b64a80332a981b7e4d5d726ea4e8418a07452a037871925ba71eed8368161305c2d578635a860075c326b5f13513ffc5a58718acc56ce66834478e2a43a67588a84b4441a697e202efc37cde1c2e4e2d596d5b2c6c03c5ac3ce9e39abc3ec1286bdef3e5b6c5fcb6cd504720a997984265413d5b7a6097c5417f48215c0e281bee0b738e545c501ed78da1f9067cba2f858b4650382af2083e71bf5243e26eecc4bd3913971ad8910e1706401feab316016a972a6f4cb863b98dac4d8e48ac400349140c824cd05bc6ba3381af2966349ebb00bf0ff8ab3a0ec21502c8a8b4ca46d22fe591d9abd1a3c0167632b77a47028d49b514769eeb917133c9e2ffd4828bb58b5165fcc8b2d8e319481e68517a43a3bb49f780914d7ef5d438717a907d67af70fe68f138e8662500101adc42073e921c8484f3ec18bced0263470062d66049e0b766c3935eaea49b318b857c0380fd156143f169f3401e95678d0f2f7f882a56a5bdcc11f9fa75f24ebf149ad259f55d9e7e5abd5808524c4635531641be6eb7e307c0c55f2f374b8b3193bbb0216b84f223a4341fcea05beb96e22c1511edd9838a72f87a6e64d5432287f716b405de0dad5e6619e3e92af4c635e339f1a2e2cc00f622c68954c3f402af3376bfad733e2526239cb94d506ab08bd985f8685762343cd1820e3e71fc777219244d2a8b502154f6c4b5de24a4c9f2f48589f9e3cb61f7769b661847b6d7fe7feb6c19f25ac2e1f172b11f93d1674921956fa5b5fae577b3927d45c294fbec9c7cdaee8bb73f438de252791465518bdf2a5e619374d26809a05e686f0c261ed3b10ba3f004f9d5b8a226ff1ebaba1a59324d00313ff95f70b751b38c394fcf9a37c4b32ece174f28b818e7f95a64d3195ca7d159b7247fcf817ebd43815a3518bbc8d61b7c50ed28f9a6be618e31a71c64fb66ad2a8a06a624e24b7e771ae41085836c194587501f356352fe9281e3af63f4a8ea95d3a91434692a09d48b5e77487b2ffe5c2c98bc6445d17620022aca2281323cc89a7545fa2a5b4656e76bbb5f103fb88f8c26450ff3cd90b4dee65edde1873e236bfae605dbbc1f448e7d08f5ef202353181a5b2f281365d6fe843f8334802574a6923cb82ce4a043face7dc0506f65c4f290b2c25492488b3dafb7e24f09d31c91ea1531a269f0461dcbd2e2b8a717a7ea70539b119232520bfba05f6796f45600c187908640473d220c959dd6094929c08badefac26ebfdb4df4d01e635b296bf4f378ede18f81336a7da58efc356ddab11988c6e80218b82bd0b7905a98d813fe44cd79e42efec14aeaa9d6111c7f01cf3fae74277b20c874a6498b0d912d612984919aa56a0bea71bb50958514669f090011c86b6713f27a29f36b73213051df1f8eb9b915da7b3bedbec8d05255f6dcf95149b8647dd381380cc4ce9c2430285a1b373c811b23bd6fc13e2bf95eb81d214c9ee06b0e57972b7fa98d2ed24493be1e484ec07678532fafe31a8bf4b9bca2ff6057c4e50ced4537628a7d19a01c412c000c58fc0fd56d3040ddb5af57087aeca10c70dba3811505cdb9b72789f610cb9b359480a518be60c7859f0b638f23438af1911af8744a104438b042ea1731d2a356ebbe7ea505c27f071ecf1da4d328a08f27e499f16d138b983372845b5b1f7f5de8c47a9566e171cf6ad8757f88673d6bdfcaa076ee1f79d9350c04f8dab4b9aceb101db2181284cdea729263a516100a4b10591c1785cdbb1096be9c01180daca37cc743f5e680cd2ae63f346eb9ea9fd208f4ed022d6523a30b06614f3785f1afd61c248980439652e499321ba0505725a9296ea39f1bccd55689595067df4f8da3c43f0ba322a962f1abd069f27b6fa0c099250547c316d705ac0e0c559514cd235bc893363b6e1375ec046d4058e90796da65b33b48b4cfec5f0568c8a862f0b9c384107407dffef8a93fa9134cc182f478e910e1b8d9ecd974974aa611c4f5c0b7d0404f273a950f7bf533572bc7df9f896a133ab30c48e7edbef7ed4f3f9399b1571f88adfd12b22999950c38a273198424ab5d5ae114dae49de880db41efa1fb69d0bb701e7bc114bfd7c577186cc65e12823685dfe7467795ec8307af8b7e8ad6b196820318fb47c814c8001fb55ba8980b864129a54ee48401d89e199ea343ef86d84e7192b4ca460fb36f0112685ac26e148dd4b3c41e2dd3b655ba63001ae4cf49243023746f896b28d34653802dfe32672643d9c4c0bb5f13bb814a1c0c86e3de28156ccdd2956f460e098290b483c56804d782439e362f948ce9f43b544a36f167420388098041f7b913714850eef3c9f136a2439c574df1520d480b47a898f3fc34ce96861786ab0dd6ba02bdfd07b2d9a454351bbd11436384b3df74e6aa641868bbafe058ab98e9c01b372ad65ced425524aca83a552031cd331832429572e2e9fc885a07e173726c5cd826457a14e4305165d846927b1c62d6db7b63d5014d94aef4fb4abe8d122f84256ff7fa4d3eb5759d5692d79425e8e43ff11f797d55ac022abe6ceb4f447dd43f2a21ff00b1738da7bda4fac9605a11302a72d4e2d278474627b343f3c090dacc1c227a9cf444c6d200609178c586c31ac413d4c334412a19092f7549b39d8a3f091ea458f1db10633f11dce537addfaec53e1408fe67cc1b85b9e67ffba2932daa07e942be4ca89cd169e8214746b735875c92166364284e23f659b950f2dde1305ce05c1ad34a6aa4826d2bcfdb0a05cb41333310ed1a3049790d7a2c7b1b9e453821f328d8550aa54921440bea89debb3b5a64bd315ddddc514d91f1c4b1ac0143344e4ccfc3611fa4bdf348783d14a87694915f793fdd5b1badbe42fc0250459eae980d967c8cb3e3380dcca5b9457c8f70984a41779f26ebaf003699026864ac6cd46e6a76e6b8a6edc681242fdf98faed7f1f2d34a267856a61e1dd107f42bcb95ac2c9bebeec04464b935c1f6592ddc90c900d401eaa253891888ad26bb2cfaa25fce9801e9d0b0813535230de2e9fe6f2da948feab93ed53be64a163a612352a1eda22bda3959703c3a6eb2be1269411d72e1b108164c82cb67aad6e533c9c3b85a3d28f909731a154a9b0eda68242b187187a12d0003d86b25427bce8990b9380aa330b876691d8a5420b67fe88c2999353c605e9af740ea578d32dabdbf055bab5f84ea252a429faf49d009549a4730831b565978a65fcbd9f28aeb11a0296e35a3be4b8a6c5f1142f6db7736eff2b6f0b9366ce56f8c21dde7ece41bd96cc2fd6eee1fd97c1bd0cd69b134bafa1f4fce5af2d0fe9a1a6022edfc4615131fc1af70831ce90a0086c4b8b88be327bdf6ff61ceaa099a91586b17718f5d8d1b07c215aa96a171b95e8a6ccad37b2c4cffc1ff043e7b785a4c8137815b002d90a866684c4d8fa4084586078a30ad3616351a24f8538d7d4d30dd052acee09cf6355249c3b178b7b558422ac59af9189d07f9844622288ecccda2c4da17e91c7d2ce391fad04edcf9001904e130fcada9a7afc6beb6625cd9093ce74e5077c1dee7d5edc931b8732898311ec2ba375fc568bfc3ada8e08ee393828d2b106634e65203dd85fadbe5d21f96d3f8563c54e34a5b5fe3f7c497e68b8c6e9520af68e31b9f55c3ebb616b3880c57b6a82f664e2a044b3cca71171e1da58f15b287ef386c1f91bc1275ac8d62e86ff294bca9b46f4aef4dee2896c84382c708fe2a81bfcb9d7bee829d31986e0e246cfe0ede15654939a4d1724081ffe78cd52f7fe800ab6a48d5bcd5693edb60a1172a55ed9cbfd5ab0ab3d2fa05ea12a686cced5690d8fed8e3d467c3b8e08cec6acdaca999964292586de6a1494dd32496786aa33e89e18992e33d3092201fe3a2f8a7d00f47b1737ca41f2418ef5a2f4f52544f4f8759cb90f81fe2990377efa550b9c8df51c986f5df8e4b4e803307f3f6840b082fa5d8ccb72bfa942e3e91579334815d57d9a4fa860eb4510752129281e6e59cfded8c085a50d2124aac32de7dacd8f22857ffb45ee2f6f10b053f32745724b1e989893561e4b3a6cd5785986a4ccf1fcb7765eb34c8c5685755635b1444d617ea12f92ad85a77a80b4a5e3e4fee1d48b084c3d8d3e219536645fb0878d77b9102c437597e4d9e215f6998c190199f37cf065d19c456ffd961b96ce73c4d65bf4c2068b7f3bde380daa2cb3269e49b5d803abd82ed7ef92c23f80e7bc84ac7b16babed3909ef9fffd3baae0811a4b7930078f5b81e6b877d2367a14ea316488875b00dc10c481769aee6d46ffc886a8459bc422f2e755d13661892be85edb00e319b9d486e87339390baf8a2fd0f210301b3fc0ae535f8c846f308a940afb1ae30e9c4853962f7b47a1c43439f2f909d3cb4ac427ab739eb5f31ea83563f8bb0d80611317cd20b8f3229d7f979c42c9d61bd272225e0d857394a7295feaf331123990d60c71a9ad50f3b5db9876938206349f6e0ff6030f32469df8eedb8c138d80648bf8eea95a16fce0c9327ef1595955e00f1ca956babd6ee8f5b497f51fb4750b27f9f70e452b1d1bc01a3d5f1c50a2b6e46d08a86270391abc95cfba456eb0c2940102f17673a5854fc7a96602cfa9540bebb5a619fe7609fcd7809a5630d595eb29d879a62edd48edb9490b2f85e20bab194065e018c557da14d5329437332a02686f23e3da05283605b2f874640d3f40b2f0fd08176b551711d903daaf48b56df4815d818e82a96015110bf096fb46668945d7be71e995b95a7ee7f27e7085594525d503d533ed74b4d1f1edd8a5efbf0bfb8209bc24a2dce7d74dc5c434a79de4e10850695daa205da8ffc9afac893836f7b7ba23711ddefa07cf6260dff525141c1827baf67385d3bb6bae980d7baa79285eba0b69f0070fa5c90ff1f1e9362e68e4c28f35c76e9a8089f2d72bd4bf73854e93bb8252cc05679fddbe7f35646915832817161dffbb77a3454dbbed4fd2229827dad2550ddc3f62772f131eecf0c498bc0f980222fe70731746", 0x1000, 0x3b4}], 0x1000000, &(0x7f0000001340)={[], [{@subj_role={'subj_role'}}]}) r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) connect(r0, &(0x7f0000000100)=@llc={0x1a, 0x303, 0x0, 0x1f, 0x7, 0x7, @local}, 0x80) 18:45:21 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1a00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000002"]}) 18:45:21 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x2) r1 = socket$inet(0x2, 0x4000000805, 0x3) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000100)={0x9, 0x1, [{0x5, 0x0, 0x4}, {0x7fffffff, 0x0, 0x6}, {0x40, 0x0, 0xeff}, {0x0, 0x0, 0x8}, {0x5, 0x0, 0x9b56}, {0x9, 0x0, 0x3}, {0xebad, 0x0, 0x3}, {0x40, 0x0, 0x2}, {0x6, 0x0, 0x80000000}]}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4, 0x1}, &(0x7f000034f000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r4, 0x7}, 0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r7, 0x3}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r7, 0x7}) [ 593.047275][T24173] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 593.079750][T24174] ntfs: (device loop4): parse_options(): Unrecognized mount option subj_role. [ 593.101042][T24180] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x7000000) 18:45:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0c00000002"]}) [ 593.119288][T24174] ntfs: (device loop4): parse_options(): Unrecognized mount option . [ 593.219617][T24174] ntfs: (device loop4): parse_options(): Unrecognized mount option subj_role. 18:45:22 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) [ 593.219632][T24174] ntfs: (device loop4): parse_options(): Unrecognized mount option . [ 593.460627][T24203] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x9000000) [ 593.482409][T24207] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:22 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1b00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000002"]}) [ 593.740235][T24222] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:22 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfff, 0x42) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x3d9ac3, 0xe1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000000)) [ 593.789724][T24227] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:22 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1c00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xa000000) 18:45:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000002"]}) 18:45:22 executing program 4: fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000380)={0x2, 0x2, 0x7, 0x5}) prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair(0x1a, 0xa, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$netrom(r2, &(0x7f0000000100)={{0x3, @default, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) pipe2$9p(&(0x7f0000000280), 0x80000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in6}}, {{@in=@dev}}}, &(0x7f0000000080)=0xe8) r4 = eventfd(0x0) msgrcv(0x0, &(0x7f00000003c0)={0x0, ""/66}, 0x4a, 0x1, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) write$9p(r0, &(0x7f00000002c0)="d05ff11632d5d26149ed9e8c57b40158bccf59576249b49f38d7e8d75710a54e58f312fa4a85078302617294dface23ae2c646f7233f425dc00f9c35881814c2ab2e55de89adb64652a37a0a0e8bf266283744e667536111312576d2998280a98a2e98ee6a74d80cd8f116b77201c9a4bd85f179f2b4a8a9492ff3f2a947e1b787f4f099", 0x84) [ 594.080938][T24250] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:22 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf000000) 18:45:22 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1d00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:22 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/vcsu\x00', 0x8000, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/self\x00', 0x400040, 0x0) r11 = syz_open_dev$vcsu(&(0x7f0000001e40)='/dev/vcsu#\x00', 0x7, 0x40000) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r12) sendmsg$netlink(r5, &(0x7f0000001f00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d40)=[{&(0x7f0000000280)={0x15b0, 0x19, 0x200, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x100c, 0x35, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @fd=r2}, @generic="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"]}, @typed={0x8, 0x12, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x24, 0x3b, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @uid}, @typed={0x8, 0x6d, 0x0, 0x0, @uid}, @typed={0x8, 0x26, 0x0, 0x0, @uid}, @typed={0x8, 0x45, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @nested={0xfc, 0x9, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @u32}, @typed={0x8, 0x51, 0x0, 0x0, @uid}, @generic="50c3244e4198960376e2328f9e65bc3962a6a605515d5e02456faabbca295bfc170f5d41e56b6a379776fa3cf3200fff18551fc0138fafdbe41bc58d5f5b2067851fd40bba4a1f320d67d64711a943804b2b7a353a802782074c78326b8622bc7b9fea9cea01549e573044f97817a1991ad85519d9424e6e0d9f9e289dada0", @generic="0310d3a4fa2fa917f3ae6d17fc9ffc0add98bb91edcde656a1a80948b7ae6c62dae5dab35fe56cd0cc364fed28ccbc021b0b1abfe7de25f5394b9e31ff64723c28b377efee37f11171911924445fa8ac3049a017c679996ec7f047f2f1b4c7e8faf4b895f80da93e4c"]}, @generic="302f6975f44018d4c6e8c85eaf9b61fefa545bf141dc9db13a8eb2803c09833be6ad876a", @nested={0x281, 0x23, 0x0, 0x1, [@typed={0x8, 0x51, 0x0, 0x0, @uid}, @generic="d2f2c45a0e92498e6964d95bf26e1b1fd6d234f3ef9eca9b402e2eb04f26341808dd00a5ba394990a3132c5a2178abb89e861ddc5332ad47a9b308c24c2e96c16ec68012d7696ef650326b46ef5e24cdcb6e9d12d47832434ff62d3f8bdc3cae4930ae92e0fdd2f26b27a490895e8fc2a8c0e7d31dc272e7c8c0f8c96f616abb99f29a5b65b85dd1d7de05569bfd", @generic="f13c92911d23ac0f16bb248da7c50f3cf26769e3cfc2bd50daef43cc349a089f0ad0f35d8e856fded439415c43166ec65be44e916ee1d9ffd9488951fc81ce29f9458530a14958367aa7290a421e01c17825cd1261f77a7a4bc1e1c88d54b42196210790004b1f7f7e2e6f3ea769dbcf274586211c529dcd", @generic="e40ad914377a3214b86ad5f1da8830deea467270f9444481c1602fa5ed2364d0460786f1c8fe41ebce9fd20b79ec9393e7607163cd66a47d1262f48f3e72e3991a5c48ad64c53f4d2f12236c21f71ec61ffb7e701c38bde73c2b80f18128", @typed={0xa9, 0x74, 0x0, 0x0, @binary="599597e668d5123f68c99b29765803b6f300ba2cb64c41f5482b35dd41284f59aefa2a45c47ada165280c391f2f24059d846a30ee0b55cafe077405373690d5238c53cbaae5e69d0588a5fab393bfbe6c2ab32d98482540a1cdd98bdf3ab434796d048f2c3d4679983f1bd30c80355892dd423a5ea27da797f8beaad5c927c92aff2b600de5490fd925a7db7c7f155a7bcd436e11406bb64c9f9db84919754cdd7f4e1f8e3"}, @generic="f576e94880f939ea3042b92b004b79b5714b11ea0c85171edafbfdd06d3bff6a399ee85c242fdb9f43d705a46c9946aeeef8370d835becb2f480d592db88e0ea1aa0281f4ddf79a18cd0fa5311343b1b5443502cad8607c7c020afd9296b1fa14a9e5013ee"]}, @nested={0x13a, 0x94, 0x0, 0x1, [@generic="e9a04763dfbe0e8e24deeca4a4c13a27c21df07b7730c1ca75764e8eff900515d10a89f2050ef4e88b1c26898322fcee4f0bb8a8e152eef22fe84c086c210e19a83592fa997d4cc46c869932af8d07a8fff3a220d0c9", @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@private0}, @typed={0x4, 0x66}, @generic="e5b336424414b54d4818a8e068a1e076e6e63bb8cee0d12c06b8dbe6a88feebc6e7822429221abeae33543697a77ea71defc6d7c919926bdde99fa90b48bcfc0f0ed247bfb1fc20675e21302217e163ebd2e9fad8a7f34623477e562f52195d23cd7b7b56a7b1401d93d58a6ab159887d2ee0db5acb5e3847f1f30f2116a48e03ce18db0ae9f278d27179429774fa0531147b9de3086d5", @generic="ea6c8c5069e30e693ae589127296f6e1c6f3e76ac7bd78414152fc0b1bde53e071cddd77f6b8c75683", @typed={0x8, 0x49, 0x0, 0x0, @u32=0xea}]}, @nested={0x7e, 0x1c, 0x0, 0x1, [@generic="9babdf7e845a5ca029625e6e2d4a6061e817552bdf61990f8fae1635259e2c5e65449ff0e791d89d58bd7ea75e691bc9960a5864f5409d5b4d23bd7cb684ab92b439c589a99917719344459c4d45e77c48856363c12d17d70967038eee247c70eeb7bb71f478", @typed={0x14, 0x52, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0x8, 0x8f, 0x0, 0x0, @u32=0x8}]}, 0x15b0}, {&(0x7f0000000200)=ANY=[@ANYBLOB="3c010025bd7000ffdbdf259d53a50451bd2df386a5cbf9c15d03187086add76c336bd2b15b689ee11cd5862c798830eee3db725a0cc51c0000000000"], 0x3c}, {&(0x7f0000001840)={0xfc, 0x17, 0x4, 0x70bd27, 0x25dfdbfe, "", [@generic="b5ad284a6b3e04c15795c5c1a260c64107556a9772dd46079b9526a9d493a5b0975c7655f4d2e85b302e773078b63c6570ddffe04806ea1c318c9c6640dd460eb15436ced9339944be66d627ddf163b546e2cec4eb8e734ce954ccbd7059a47b5bdf3c5c5457d03976292becedce78a32294ed84a85d53b79a05c765009e2c573e8514ed9e5895081362d89eef066f115c6e96131f4490672afc51474df161789a02531e7ffada462879567579a3c391971876458d30850368058001d397c6b665904dec4bd426fb70439229e6b84db68c1aae0cc47fc12eae44db771abeeb07138fdf8443fff61cffb560e7"]}, 0xfc}, {&(0x7f0000001940)={0x1fc, 0x2f, 0x2, 0x2, 0x25dfdbfe, "", [@typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@local}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @nested={0x1c3, 0x88, 0x0, 0x1, [@generic="8375c25844c3bd71ae267de0d4f9e2204d32fec40343abf399ebf6fab39768ef8a3f3baa90b977bf664f68ce4bd00b6fe8a8c03f273b5ec1b7b1f7fa9bd59758364d3061bb77c0cde5416ce366b13aed032dfc919bde76fb7e76f5edc6910a37080acf061bb5d38b54bda0dd8be87908ccf88416b1608bfcb8966b6d8b6e16a3bb61200c17fb7b3872a5078f6a6c936f265007b46d21024264924fa320d8f0548342c77334f8598afb4c33d79abad9fef8c12ce8a2562831", @generic="01f952ec72898afa8bc75d0ab90fe9bf1d6446e4e7a4449d6faa91f533d3dcc0d0066170a862492eee16739e23ff8c521451ecd511ea72844204a341892a8a2aa7381b98e13c01b8b2ddefb75a1e9107f7a482a7b8c195917c4c4c81bd84c7a245ea7b9fdbca711fb3722b", @typed={0xc, 0x25, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="73b2a03fba5808d4cf5e9e6f02177b", @typed={0xd, 0x2, 0x0, 0x0, @str='/dev/ion\x00'}, @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@remote}, @generic="7074dff6eebce05388cfe297b75a0371340443a004802495c65ca29431d1930d52a8463a810ea09af99b6305f977df5af35424e2ca0b78cf8cb45dd3eb0226f05939c6eaf574a72baae2937b50c865154d1b92a43da398e995ec2822e547b87f6b"]}]}, 0x1fc}, {&(0x7f0000001b40)={0x1d8, 0x25, 0x4, 0x70bd27, 0x25dfdbfd, "", [@nested={0x1c6, 0x7f, 0x0, 0x1, [@typed={0x8, 0x78, 0x0, 0x0, @pid}, @typed={0xc, 0x13, 0x0, 0x0, @u64=0x8}, @generic="224264c4e5a95387b3283dfa3e76d267a16d23ff25dfbd719fadd9fe1672652bdadc20ae719e0efd40495e55c488f182373a960962db0b2baa1258bb8b94022fa63ba1a5120f11213c1315b836d95bab85d2daff36acc5aab41c56788e4ee66efda167cdfc74c205f84b50c1affe7e8066c5d55a70ce9c50b1cf3f4924df9746e415821f9543d66ea3d395742368170219ffd7c05ab677b67d12fc41fc9ac4cc0ec55d3261bfac9cccdb18f37d4acaf3f8aadad723b5b07bbcdb0d39e3e500803d429ee1529f004af1f7cf3ca4201f4b594177982a735af9309ee664", @generic="c8102aab2831ae1af532e25a6471694d751f1287d02bea0185e87c4c9ae0b688562cfeee53d1393085faae688e6dcd11e6b20e2958f77b3142838d5f898e706d92b55d024627179e352e", @typed={0x85, 0x89, 0x0, 0x0, @binary="79170870a3d449a388f98ad29f22ae9a9b88d6b56f4793461fd8c88ac2a68d9db729e47e2314740a404999eaebad91b254e2b162cac21466cfc4d42f5454a6ede4804231847386df64778065c57a8bae6893d39b66e51242020cff2d15cbed7d885807b6b06065aafe5256d8e86846a2d0f13799eba4693f34e134ecb035505887"}]}]}, 0x1d8}], 0x5, &(0x7f0000001e80)=[@rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r3, r9, r10, r11, r12]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x60, 0x20004811}, 0x48804) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000002"]}) 18:45:23 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) write$binfmt_aout(r2, &(0x7f0000000100)={{0xcc, 0xb0, 0xb3, 0x3b4, 0x21c, 0x2, 0x15b, 0x7}, "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", [[], [], [], [], [], []]}, 0x1620) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x2710, 0x0, &(0x7f0000ffe000/0x2000)=nil}) 18:45:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x20000000) 18:45:23 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x8}, 0x8) r7 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x3f000000) 18:45:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000002"]}) 18:45:23 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x3e00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:23 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000002140)='/dev/dlm_plock\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000006200)={0x2020}, 0x2020) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:23 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x48000000) 18:45:23 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x450, 0x3f4, 0x400, 0x70bd26, 0x25dfdbfe, {0x4, 0x0, 0x3f, [0x14, 0x400, 0x2000, 0x200, 0x5, 0x224c, 0x3f, 0x8000, 0x10001, 0x6, 0xc0c, 0x80000000, 0x26e, 0xffffffff, 0x0, 0x7, 0x56, 0x3, 0x5, 0x8, 0x80000000, 0x1, 0x7, 0x1, 0xc4, 0x7, 0x4, 0x1f, 0x7ff, 0x5, 0x3, 0x8, 0x20, 0x5a, 0x0, 0x3f, 0x1, 0x5, 0xffffffff, 0x1, 0x6, 0x6255, 0x40000, 0x9, 0xffff, 0x8, 0x6, 0xfff, 0x10000, 0x6, 0x6, 0x2c6, 0xfff, 0x1c0000, 0x4, 0x80000001, 0x5, 0x2, 0x94, 0x1f, 0x800, 0x2, 0x9, 0x6], [0x0, 0xde9, 0x3, 0xf6c, 0x0, 0x1, 0x695fcf18, 0x7, 0x9005, 0x3, 0x1, 0x7, 0x8, 0x1, 0x5bd, 0x40, 0x7, 0x10000, 0x7, 0x3, 0x1000, 0xe58e, 0x5, 0x400, 0x1, 0x0, 0x1f, 0x4, 0x7, 0x5, 0x101, 0x3ff, 0x8, 0x1, 0x471, 0x0, 0x1, 0x3ff, 0x3ff, 0x5, 0x8, 0x4, 0x49762cae, 0x7ff, 0x9, 0x5a9, 0x5, 0x7fff, 0xfffff801, 0x2, 0x76a, 0x1d, 0x1, 0x7213, 0x7, 0x800, 0xfffffc01, 0x4, 0x0, 0x2, 0x9, 0x2, 0xffff9481, 0x8], [0x2, 0x3, 0x4996378d, 0x0, 0x6, 0x1, 0x1ff, 0x5, 0x8, 0x2, 0x2, 0x3a91efe6, 0xbd57ae1, 0x441, 0x9, 0x220, 0x10000, 0x3, 0x9, 0x8, 0x2c2, 0x4, 0x0, 0xfffffffc, 0x6, 0x9ff, 0x8, 0x0, 0x6, 0x6, 0x80000000, 0x52044fed, 0x0, 0xfffffffe, 0x80000001, 0x7, 0x4, 0x101, 0x5, 0xb2, 0x8, 0x3b11facc, 0x5, 0xffffe0e9, 0x0, 0x0, 0x75, 0x9, 0x3, 0x4, 0xfffffffa, 0x200, 0xfe1, 0x8, 0x40, 0x101, 0x9, 0x5, 0xffff8000, 0x6, 0x6, 0x8, 0x20, 0xe8], [0x4, 0x0, 0x80, 0x200, 0x8000, 0x2, 0xffff305a, 0x0, 0x1f, 0x101, 0x5, 0x49, 0x6, 0x81, 0x9, 0x1, 0x6, 0x3, 0x47, 0xffff8c41, 0xd0d, 0x80000001, 0x1f, 0x3, 0x4, 0x101, 0x80, 0xfffffc00, 0x7, 0x444, 0x7, 0x6, 0xfffffffd, 0xae, 0x5, 0x4, 0xffff, 0x4ecfcb29, 0x100, 0x401, 0x1, 0x4, 0x3ff, 0x1, 0xffffffff, 0xff, 0x5, 0x4, 0x2, 0x285, 0x7, 0x3, 0x4, 0x101, 0x2, 0x8, 0x2, 0x5, 0x2, 0x9, 0x6, 0x1, 0x9f, 0x4f3], 0x2e, ['\'\x00', '/dev/kvm\x00', 'ns/mnt\x00', '!#]+\x00', '/dev/kvm\x00', '/dev/kvm\x00', '^@\x00', '*\x00']}, ["", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x4004844}, 0x20004801) 18:45:23 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x101000, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1200000002"]}) 18:45:23 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x4c000000) 18:45:24 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x5a0e, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x9, 0xa02) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1300000002"]}) 18:45:24 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x44}}, 0x0) r8 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) splice(r1, &(0x7f0000000000)=0x3, r8, &(0x7f0000000080)=0x10000, 0x2, 0x1c) r9 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r9, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x59010000) 18:45:24 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdab, 0x0, 0x2, 0x1, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r1 = open(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) fadvise64(r4, 0x1, 0x0, 0x1) write$eventfd(r1, &(0x7f0000000080)=0x7, 0x8) fallocate(r0, 0x10, 0xdcf, 0x7) r5 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r5, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r5, 0x7}) 18:45:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000100)) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) setns(r5, 0x8000000) shutdown(r5, 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:24 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x8002, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000002"]}) 18:45:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x60000000) 18:45:24 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40001, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') select(0x40, &(0x7f0000000100)={0x5, 0x5, 0x80000000, 0x94c2, 0x9, 0x5, 0x5, 0x5}, &(0x7f0000000140)={0x7ff, 0x0, 0x5ed9, 0x8, 0x4, 0x472c0000, 0x7, 0x80}, &(0x7f0000000180)={0x9, 0xf3ed, 0x2, 0x1, 0x4, 0x400, 0x3f, 0x4}, &(0x7f00000001c0)={0x0, 0x2710}) open(0x0, 0x109201, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x2080, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000003, 0x20010, r0, 0xc79c7000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x3000, 0x0, 0x4, r3, 0x4}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:24 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xffffffffffffffff]}, 0x8) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r8, 0xc01064c7, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000140)=[0x0]}) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x141000, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000200)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:24 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:24 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xf001, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x68000000) 18:45:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000002"]}) 18:45:25 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x19, 0x2, @thr={&(0x7f0000000080), &(0x7f0000000100)="1082ec6736eb85094eac89f1901e27e6bac61cc42b57af6370f20c24ffd839631bfa75d0417d10ae9ce17c508968053e63573c31804d71972d538aecf6261e8f45837b7a4a3a9f6230eb9186ecb869fcc123"}}) r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xa440, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) r4 = fanotify_init(0x10, 0x80000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESHEX], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000340)) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r4, &(0x7f0000000080)={r0, r8, 0x7}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:25 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xff00, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r7, 0x200}, &(0x7f0000000140)=0x8) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r10, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r11}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x6c000000) 18:45:25 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000", @ANYBLOB="10"], 0x48}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="eb3d90", 0xfffffff0}], 0x8801, &(0x7f0000000000)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1600000002"]}) 18:45:25 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xff7f, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x74000000) 18:45:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x2, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0xff, 0x3, 0x6b, @empty, @mcast2, 0x40, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', r4, 0x2f, 0x40, 0x4, 0x5, 0x7, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x40, 0x8000, 0x3, 0x40}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x9f0000, 0x1, 0x400, r3, 0x0, &(0x7f00000001c0)={0x99096b, 0x3, [], @p_u16=&(0x7f0000000180)}}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x5, 0x0, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1700000002"]}) 18:45:25 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x7a000000) 18:45:25 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xe0ffff, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:25 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xffffffff00000000, 0x44802) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r9, 0x0}) r11 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r11, &(0x7f0000000200)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10, 0x1c00) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r10}) close_range(r0, 0xffffffffffffffff, 0x0) accept4$llc(r7, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000280)=0x10, 0x80000) [ 597.315253][T24502] validate_nla: 18 callbacks suppressed [ 597.315270][T24502] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x9b0a0000) [ 597.336329][T24503] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000140)={0x1000000000008, 0xe, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002"]}) 18:45:26 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x109) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x9effffff) 18:45:26 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:26 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') preadv(r1, &(0x7f00000017c0), 0x2dc, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000c40)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001480)={0x10, 0x4, {0x1, @struct={0x4, 0x9}, 0x0, 0x101, 0x5, 0x3, 0x8001, 0xff57, 0x0, @usage=0x1ff, 0x0, 0x2, [0x100000001, 0xbb7b, 0x80000000, 0xffff, 0x8, 0xffff]}, {0x6, @struct={0x8, 0x4}, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x400, 0x1, @usage=0x5, 0x5, 0x8, [0x1, 0xffffffff, 0x6, 0xffffffffffffbe78, 0x0, 0x7]}, {0x3, @usage=0x9, r3, 0x5, 0x0, 0x8, 0x3a2a2ae6, 0x9, 0x0, @struct={0x9, 0x9}, 0x1f, 0x9, [0xffffffffffff0001, 0x4, 0xfffffffffffffffb, 0x7fffffff, 0x4c71, 0x2]}, {0x0, 0x9b, 0x101}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000100)={0x0, 0x0, @start={r3, 0x0, "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", "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"}, [0x41fc, 0x1, 0x80, 0x4, 0x100000000, 0xfffffffffffffffe, 0x73c, 0xfffffffffffffffb, 0x0, 0x5, 0xad54, 0x100000000, 0x6, 0x20, 0x4, 0x1ff, 0xe6b, 0x9821, 0x2, 0xff, 0x3, 0x6d6, 0x6, 0x2630a979, 0x5, 0x695, 0x5, 0x9, 0x5, 0x0, 0x100000000, 0x80000000, 0xef, 0x0, 0x401, 0x6, 0x6, 0x7, 0x5, 0x0, 0x8001, 0xb3, 0xbf, 0x41, 0x1, 0x8, 0x9, 0x4, 0xfffffffffffffff7, 0x5, 0x0, 0x6, 0x1000, 0x5, 0x10001, 0x6, 0x3, 0x80000000, 0x77, 0x9, 0x7, 0x101, 0x100, 0x7fff]}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r6, 0x3}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80001, 0x0) dup(r7) 18:45:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000002"]}) 18:45:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xc00e0000) 18:45:26 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x6d48c3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xa, 0xff, 0x7}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) dup(r3) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2000, 0x0) r7 = dup(r6) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000180)=""/166) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000100)={r4}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000002"]}) 18:45:26 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:26 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="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", 0xff}, {&(0x7f0000000200)="2dba0dbd783e2bad065bc2d1bc5340335eea6f90501286031bb9b39092aaf08d95b605dde361aa0fc8f600bf88121c6c65fb75a477dabae0b2cf46fc6b40a24cdb1dcc71e3c7156e9efd3817687ba1bd21574f042db94dd56350eee956ce7674c490d6c264e00cc43112071ca36022c41ee8de1bd4bc6b0b6366", 0x7a}, {&(0x7f0000000280)="1d065ae17347c4c46a18dd66d15b459f2f5ec882e346ffe448147201cc63a1bbb7136c0d39a9f69b04ba9c19013dfce5b5b227398518049584d07e9b792c5614d0c27d9fcc21e810197f7f", 0x4b}, {&(0x7f0000000300)="3c577c05a0020891b4b1796125d50c4334fd1ae403822c5dcc13f86a1e9d8f9944662c9fc63deff42c1e3fc45793245723db21393901c30955c8192cb0bf75dfb5c53646e4151bc4762c66086e01aedc098cb27e32c5f81650df09a8ff21dc7273d062095cf1568000d2058ef21d6649593eab017a09769437a058ba984a6c6aa383585ad18aa77bff97e5ba1c52f8582c17c4a7c7a0e0b355d0", 0x9a}], 0x4, 0xcf27, 0x6) 18:45:26 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf0ffffff) 18:45:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000140)={{0x2e, @local, 0x4e24, 0x2, 'lc\x00', 0x1, 0x0, 0x4c}, {@multicast1, 0x4e21, 0x3, 0xc16d, 0x80, 0x9}}, 0x44) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:27 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0xc9) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x2004000, &(0x7f0000618000)={0x2, 0x4e20, @local}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000140)='ns/mnt\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r5, 0x7}, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r8, 0x3}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0) 18:45:27 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000002"]}) 18:45:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xffffe000) 18:45:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x1, 0x0, 0x7, 0x3}, 0x14) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xfffff000) 18:45:27 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:27 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x400001d) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x3b0000, 0x3b493d5c, 0x3f, r0, 0x0, &(0x7f0000000100)={0xa10905, 0xffffffc0, [], @ptr=0x1}}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x84000, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r4, 0x7}) 18:45:27 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x105000, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x0, 0xfb, 0x1, 0xfffffffe}, {0x8000, 0x81, 0x0, 0x9}, {0x1, 0x2, 0x9, 0x4}, {0x6, 0x7f, 0x8, 0x5}, {0xb76, 0x6, 0x9}]}, 0x10) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) 18:45:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000002"]}) 18:45:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x458, 0x3f4, 0x800, 0x70bd2c, 0x25dfdbfc, {0x3, 0x0, 0x1f, [0x80, 0x1000, 0x5, 0x3ed2, 0x3dd, 0x6, 0xffffffff, 0x8, 0x3f, 0x1, 0x4, 0xfffffff7, 0x8001, 0x2b7, 0x80000000, 0x7fff, 0x2, 0xffff, 0x9, 0x8, 0x74a, 0x8, 0x1f, 0x1, 0x3, 0x6ef, 0x1ff, 0xdd74, 0x80, 0x1, 0x266, 0x7fff, 0x800, 0x8, 0x0, 0x9, 0x605a, 0xe980, 0x2, 0x8000, 0x2, 0x401, 0x7f, 0x6, 0x3, 0x7f, 0x8, 0x400, 0x4, 0x8, 0x0, 0x0, 0x4292, 0xb07c, 0xb615, 0x5, 0x1000, 0x81, 0x6, 0x926, 0xffffffff, 0x5, 0x0, 0x5d51], [0x0, 0x7fffffff, 0x4, 0xff, 0xe004, 0x9, 0x3, 0x3, 0x92a, 0x1, 0xffff7fff, 0x7c, 0x3, 0x9, 0x3ba928ed, 0xffffffff, 0x68ddb203, 0x0, 0x4, 0x2, 0x7, 0x7, 0x5, 0x3, 0x4, 0x8, 0x6, 0xd5bd, 0x10001, 0xb62, 0x4, 0x2, 0x3, 0x1, 0x8001, 0x7, 0xfffffffb, 0x8915, 0x1, 0x100, 0x0, 0x5, 0x40, 0xff, 0x10000, 0x3e, 0x622, 0x4, 0x6d, 0x7db, 0x95bc, 0x80000001, 0x0, 0x3ff, 0x2, 0x3, 0x7, 0x4, 0x3, 0x5, 0x0, 0x80000001, 0x3f5, 0x9], [0x9, 0x0, 0x9, 0xfffffffa, 0x80, 0x1, 0x9, 0x63, 0x1f, 0xec, 0xb572, 0x5, 0x80, 0x4, 0xffff, 0x3, 0x2, 0x6, 0x1, 0xa6, 0x3, 0x9c3b, 0x3f, 0xf8000000, 0x4509, 0x40, 0x3, 0x40, 0x277, 0x1000, 0x8001, 0x80, 0x4, 0x8, 0x1, 0x3, 0x400, 0x8000, 0xfffff801, 0x9, 0x0, 0x20, 0xdc, 0xfffff001, 0x0, 0x9, 0x1ff, 0x1, 0x445, 0xfffffff7, 0xbf, 0x3, 0x6f53b427, 0x7, 0x80000000, 0x8, 0x3, 0x81, 0x9, 0x2, 0x5, 0x5, 0xff, 0xda0], [0x800, 0x6c6, 0x101, 0x5, 0x5, 0x4, 0xc12e, 0x8, 0x2, 0x7fffffff, 0x1975, 0x8, 0x8b1, 0x6d, 0x9, 0x7, 0x0, 0x8, 0x2, 0x8, 0x2, 0xef, 0x9, 0x7fffffff, 0x4, 0x0, 0xff, 0x4dc, 0x9, 0x8, 0x9f9, 0x0, 0x7f, 0x69, 0x100, 0x1, 0x787, 0x7f, 0x8, 0x9df, 0x1, 0xfffffffb, 0x101, 0x3, 0x101, 0xff, 0x3, 0x9, 0x38, 0x8c5, 0x4, 0x7c2, 0x2, 0x9, 0x4e64, 0x5, 0x1, 0x8, 0x1, 0x5, 0x1, 0xd6, 0x0, 0x6], 0x37, ['-.+}/\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '][{\x00', '/dev/dri/card#\x00']}, ["", ""]}, 0x458}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:27 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xffffff7f) 18:45:27 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:27 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0xa0000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:27 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000000)={0x2b}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x100000000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x10000) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) r5 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r5, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) 18:45:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1d00000002"]}) 18:45:28 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0xc0900, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x2000, 0x0, 0x4, r3, 0xd}) 18:45:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xffffff9e) 18:45:28 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:28 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$FOU_CMD_DEL(r9, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xfffffff0) 18:45:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000002"]}) 18:45:28 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'bond_slave_0\x00', {0x2, 0x4e24, @loopback}}) r2 = socket(0x1e, 0x4, 0x8) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x2, 0x0, 0x0, 0x81, 0x4800000}, 0x14) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7, 0x0}) r9 = socket(0x2, 0x800, 0x7fffffff) r10 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x40, 0x80000) ioctl$BLKZEROOUT(r10, 0x127f, &(0x7f0000000200)={0x9, 0x1f}) getpeername$inet6(r9, &(0x7f0000000100), &(0x7f0000000140)=0x1c) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r8}) close_range(r0, 0xffffffffffffffff, 0x0) r11 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x61e540, 0x90) ioctl$NS_GET_NSTYPE(r11, 0xb703, 0x0) 18:45:28 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:28 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = eventfd(0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x2010, r3, 0x10000) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r1, 0x3}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x400002, 0x0) waitid$P_PIDFD(0x3, r4, &(0x7f0000000180), 0x40000000, &(0x7f0000000200)) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0x3f, 0x7fff, 0x6}) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x1) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0xe, 0x9, 0xc, 0xb, 0x9, 0x2, 0x2, 0x94}}) 18:45:28 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x11, 0xffffffffffffffff, 0xca362000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000080)=0x60, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000180)={0x101, 0x80000001, 0x3, 0x2444, 0x7, [0x6a, 0x80000000, 0x93c3, 0x20], [0x20, 0xd7, 0x8, 0x8c3d], [0x400, 0x1000, 0x3, 0x6], [0x3, 0x6, 0x3, 0x6]}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x40030000000000) 18:45:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2100000002"]}) 18:45:28 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, 0x15, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000000)=0x5) open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) [ 600.014155][T24715] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:28 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:28 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xe0ffff00000000) 18:45:28 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0xd4, 0x2, 0xa3b, 0x3ff}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r4, 0x7}) 18:45:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2300000002"]}) 18:45:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0xf0ffffffffffff) 18:45:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015301}) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$TUNSETGROUP(r8, 0x400454ce, r10) sendmsg$netlink(r5, &(0x7f0000000cc0)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc, &(0x7f0000000380)=[{&(0x7f00000002c0)={0xa4, 0x42, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@generic="ca3de4089c5fefc1708d762ccf7f6be83b29124c6950258675b9cfa0fb75ab5400024cbbeb7522f1557766293d0efad4f1687387dd2a52f6131943d8ed7557da6a95eb5169bbd8603b5c0db6e6f553be9a710493c205807df489de1a2e2ac711c9510815cc40d4d5cb77192e16d105e5ffd584d62b14fff98a35b191f2bd320407973d2e972376c465675691", @nested={0x8, 0x94, 0x0, 0x1, [@typed={0x4, 0xb}]}]}, 0xa4}], 0x1, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r10}}}], 0x148, 0x4000}, 0x800) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) r11 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x81, 0x7fff, 0x3, 0x3eed, 0x16, 0xf0, 0x8, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0x2, 0x3, 0x5, 0x3}}, &(0x7f0000000200)=0xb0) [ 600.296092][T24741] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 600.312430][T24742] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:29 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:29 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:29 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_complete(0x0) accept$unix(r2, 0x0, &(0x7f0000000080)) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2400000002"]}) 18:45:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) clock_adjtime(0x4, &(0x7f0000000100)={0xaa, 0x3, 0xffffffffffff1594, 0x8, 0xffffffffffffffff, 0x6, 0x5, 0xb0, 0x69, 0x7, 0x5, 0xa96, 0x6e, 0x0, 0xfffffffffffff800, 0xffff, 0x7f, 0x3, 0x0, 0x8, 0x0, 0x3, 0x3, 0x398d, 0x1, 0x8}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000200)={0x100000, 0x2000, 0x81, 0x5, 0x1}) r7 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x100000000000000) 18:45:29 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:29 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x25e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) eventfd(0x0) r3 = syz_mount_image$f2fs(&(0x7f0000000080)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x100000001, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="9d0ba4e468c19d7d016aa31b521accf8328a1cd18a66d88c1d7bd5563708c16caee5d8c2369d8b93a82726684f2e4e8606d55ff7274e24a1aa21117aa05274c8cfc43fcd204e21c2841f8df814e4e1ee20907952ed2098", 0x57, 0x9}, {&(0x7f00000001c0)="b66eb7f63c7dc412971313c064ae6d59a092e74efa2832721c28265ffb1b6a39b18c8b786e769706cfce4f35628d28272fb36fa78222e21502f23b09bce2154db7f720f935a06bf0599f431ea4479bf3db6fd757475d174b661d60e023d33346c175527d6907e802a8a6032b2f597227223a8823adf3f029d18bb8b2a8d1259619fa28787d", 0x85, 0x2}], 0x800002, &(0x7f00000002c0)={[{@flush_merge='flush_merge'}, {@noinline_xattr='noinline_xattr'}, {@alloc_mode_reuse='alloc_mode=reuse'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '$@'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) openat2(r3, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x8c000, 0x40, 0x4}, 0x18) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0xa000, 0x0) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000340)={0xf000, 0x0, 0x4, r0, 0x6}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) [ 600.840629][T24788] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 600.913601][T24797] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:29 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000000c0)={0x5000, 0x0, 0x4, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$fb(r8, &(0x7f0000000100)="e3e74c093a4cdaf27eccc2e778864577a6dcca0efe353cabfda73805f9a3b2626fe66bda2826375d2180567fad2f84cf5b5c115694f6380c5376aedb7144895bb226c6fad737e6031bd77e838cc3bcf965446aafe58cf8ef4313b9eae40a565adb51f64d7dc6979c4a5fc5a3af222f2c9538e19235c943c33a2518992c58937c201f869add54fa83f25b1d82ca1cb6aa6dca263561a89af4c09ecd8c76d57f8046e5f76a7a5150919f80f97797b08c3a311549d735a568482a375bc0f66dfdc2d53dcdb4b1f58711c17747a4667c01c2bb17de035b815de5e1ddfa4ebcbebfd9f30fda1bdf09c93a456466c931d5c55cdec5f9ec06727e6aae", 0xf9) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r9}) r10 = socket(0x11, 0x5, 0x2) bind(r10, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00E\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128008000100687372002000028005000600000000000a000400fb4bd2d23c08000008000200", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25170000000c009900070000000400000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="98e4f4e77723caa08afbbea57f3348afc32a38a3184a39abf0429005b98bf1d20eea1576931b24e4329b8faa6648f9634f9bec093091bd012038f20e216e260fc1866e8225d44e4dc4a0870441f4f321beaf6dbd472a93f1a55ee17de942fa08a31ee2a43171164cd781f350b4ead6c57a100a2403514f2cfa5f80baa7b6987b5eacdfd7f2a0870c32fdf462a23141bc76672f57931257801cd426e02ce95541aae51280c5b10012cd"], 0x30}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x200000000000000) 18:45:29 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2500000002"]}) 18:45:29 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x4, 0x10000) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x807) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000200)='/dev/ion\x00'], &(0x7f0000000400)=[&(0x7f00000002c0)='))$%\xd5]+@#\x00', &(0x7f0000000300)='/dev/ion\x00', &(0x7f0000000340)='(:.\x00', &(0x7f0000000380)='/dev/ion\x00', &(0x7f00000003c0)='^^\x00']) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000140)={0x7, 0x8, [], 0x0, &(0x7f0000000100)=[0x0]}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$rxrpc(r9, &(0x7f0000000440)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @ipv4={[], [], @rand_addr=0x64010101}, 0x7ff}}, 0x24) flock(r2, 0xb) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:utempter_exec_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) [ 601.176980][T24818] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 601.177094][T24818] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 601.190067][T24822] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 601.211587][T24818] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:45:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x300000000000000) [ 601.252060][T24826] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:29 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') write$UHID_INPUT(r5, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, 0xfffffffffffffffd) r6 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r6, 0x3}) r7 = fcntl$dupfd(r6, 0x0, r2) ioctl$DRM_IOCTL_AGP_FREE(r7, 0x40206435, &(0x7f0000000100)) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r6, 0x7}) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 18:45:30 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 601.406740][T24818] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 601.461871][T24842] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 18:45:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2600000002"]}) 18:45:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) getsockname$l2tp(r5, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:30 executing program 4: socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0xfd, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r4, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1], &(0x7f0000000140)=0xcc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8001, 0x10, 0x0, 0xffffffff}, &(0x7f0000000240)=0x18) 18:45:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x400000000000000) 18:45:30 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:30 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/197, 0xc5, 0xa20, &(0x7f0000000080)={0x0, 0x3938700}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r3, 0x7}) 18:45:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x500000000000000) 18:45:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000140)={0x9, 0x28, [], 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2700000002"]}) 18:45:30 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) 18:45:30 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x600000000000000) 18:45:30 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x2, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x100) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x1b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r6, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r7}) close_range(r0, 0xffffffffffffffff, 0x0) 18:45:30 executing program 0: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') open(0x0, 0x222c40, 0x1a5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r2, 0x3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x4, r2, 0x7}) 18:45:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="2800000002"]}) 18:45:30 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x21010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r0 = open(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x4, r3, 0x3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000000000000000, 0x408000) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000940)) 18:45:30 executing program 5: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x3, 0xcd, &(0x7f0000000280)=""/205, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4601, &(0x7f0000000240)={0xf000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:45:30 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x140d, 0x301, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x8}]}, 0x18}}, 0x700000000000000) [ 602.324354][T24928] ------------[ cut here ]------------ [ 602.330071][T24928] WARNING: CPU: 1 PID: 24928 at drivers/gpu/drm/vkms/vkms_gem.c:37 vkms_gem_free_object+0x85/0xa0 [ 602.387524][T24938] validate_nla: 7 callbacks suppressed [ 602.387535][T24938] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 602.429237][T24928] Modules linked in: [ 602.451903][T24928] CPU: 1 PID: 24928 Comm: syz-executor.3 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 602.451918][T24928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.451945][T24928] RIP: 0010:vkms_gem_free_object+0x85/0xa0 [ 602.451964][T24928] Code: 00 75 2b e8 8d 54 0b fd 48 8d bd 30 02 00 00 e8 d1 13 f0 fc 48 89 ef e8 89 3a a5 ff 48 89 ef 5d e9 80 5b 4b fd e8 6b 54 0b fd <0f> 0b eb a8 e8 62 54 0b fd 0f 0b eb cc e8 b9 cf 4b fd eb bb e8 b2 [ 602.451975][T24928] RSP: 0018:ffffc90016007c08 EFLAGS: 00010216 [ 602.451993][T24928] RAX: 0000000000000bad RBX: ffffffff846927a0 RCX: ffffc9000f341000 [ 602.452005][T24928] RDX: 0000000000040000 RSI: ffffffff84692825 RDI: ffff88809548e2c0 [ 602.452017][T24928] RBP: ffff88809548e000 R08: 0000000000000001 R09: ffff88809548e003 [ 602.452028][T24928] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8882182b0c30 [ 602.452041][T24928] R13: ffff88809548e008 R14: ffff88809548e128 R15: ffff88809f562000 [ 602.452056][T24928] FS: 00007f3615f91700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 602.452069][T24928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 602.452081][T24928] CR2: 0000000000000000 CR3: 0000000096e39000 CR4: 00000000001526e0 [ 602.452097][T24928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 602.452108][T24928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 602.452114][T24928] Call Trace: [ 602.452273][T24928] drm_gem_object_handle_put_unlocked+0x3ac/0x420 [ 602.452298][T24928] drm_gem_object_release_handle+0xf9/0x1b0 [ 602.452319][T24928] ? drm_gem_object_handle_put_unlocked+0x420/0x420 [ 602.452337][T24928] idr_for_each+0x113/0x220 [ 602.452355][T24928] ? idr_find+0x50/0x50 [ 602.452382][T24928] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 602.452403][T24928] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 602.452426][T24928] drm_gem_release+0x22/0x30 [ 602.452444][T24928] drm_file_free.part.0+0x866/0xcb0 [ 602.452498][T24928] ? fsnotify+0xf80/0xf80 [ 602.460697][T24928] drm_close_helper.isra.0+0x17d/0x1f0 [ 602.460720][T24928] drm_release+0x1e6/0x530 [ 602.460741][T24928] __fput+0x285/0x920 [ 602.460760][T24928] ? drm_release_noglobal+0x180/0x180 [ 602.460783][T24928] task_work_run+0xdd/0x190 [ 602.460805][T24928] exit_to_user_mode_prepare+0x195/0x1c0 [ 602.460824][T24928] syscall_exit_to_user_mode+0x59/0x2b0 [ 602.460843][T24928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 602.460856][T24928] RIP: 0033:0x45d5b9 [ 602.460973][T24928] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.461094][T24928] RSP: 002b:00007f3615f90c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 602.461116][T24928] RAX: 0000000000000000 RBX: 0000000000002040 RCX: 000000000045d5b9 [ 602.461127][T24928] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 602.461138][T24928] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 602.461149][T24928] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 602.461160][T24928] R13: 00007ffff71244ff R14: 00007f3615f919c0 R15: 000000000118cf4c [ 602.461191][T24928] Kernel panic - not syncing: panic_on_warn set ... [ 602.461210][T24928] CPU: 1 PID: 24928 Comm: syz-executor.3 Not tainted 5.9.0-rc2-next-20200828-syzkaller #0 [ 602.461222][T24928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.461228][T24928] Call Trace: [ 602.461245][T24928] dump_stack+0x18f/0x20d [ 602.461335][T24928] panic+0x2e3/0x75c [ 602.461355][T24928] ? __warn_printk+0xf3/0xf3 [ 602.461380][T24928] ? __warn.cold+0x1d/0xc1 [ 602.461403][T24928] ? vkms_gem_free_object+0x85/0xa0 [ 602.461525][T24928] __warn.cold+0x38/0xc1 [ 602.461659][T24928] ? vkms_gem_free_object+0x85/0xa0 [ 602.461679][T24928] report_bug+0x1bd/0x210 [ 602.461700][T24928] handle_bug+0x38/0x90 [ 602.461717][T24928] exc_invalid_op+0x14/0x40 [ 602.461732][T24928] asm_exc_invalid_op+0x12/0x20 [ 602.461751][T24928] RIP: 0010:vkms_gem_free_object+0x85/0xa0 [ 602.461768][T24928] Code: 00 75 2b e8 8d 54 0b fd 48 8d bd 30 02 00 00 e8 d1 13 f0 fc 48 89 ef e8 89 3a a5 ff 48 89 ef 5d e9 80 5b 4b fd e8 6b 54 0b fd <0f> 0b eb a8 e8 62 54 0b fd 0f 0b eb cc e8 b9 cf 4b fd eb bb e8 b2 [ 602.461777][T24928] RSP: 0018:ffffc90016007c08 EFLAGS: 00010216 [ 602.461792][T24928] RAX: 0000000000000bad RBX: ffffffff846927a0 RCX: ffffc9000f341000 [ 602.461803][T24928] RDX: 0000000000040000 RSI: ffffffff84692825 RDI: ffff88809548e2c0 [ 602.461814][T24928] RBP: ffff88809548e000 R08: 0000000000000001 R09: ffff88809548e003 [ 602.461825][T24928] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8882182b0c30 [ 602.461836][T24928] R13: ffff88809548e008 R14: ffff88809548e128 R15: ffff88809f562000 [ 602.461856][T24928] ? __vkms_gem_create+0xf0/0xf0 [ 602.461876][T24928] ? vkms_gem_free_object+0x85/0xa0 [ 602.461898][T24928] ? vkms_gem_free_object+0x85/0xa0 [ 602.461917][T24928] drm_gem_object_handle_put_unlocked+0x3ac/0x420 [ 602.461939][T24928] drm_gem_object_release_handle+0xf9/0x1b0 [ 602.461958][T24928] ? drm_gem_object_handle_put_unlocked+0x420/0x420 [ 602.461971][T24928] idr_for_each+0x113/0x220 [ 602.461988][T24928] ? idr_find+0x50/0x50 [ 602.462122][T24928] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 602.462267][T24928] ? lockdep_hardirqs_on_prepare+0x354/0x530 [ 602.462289][T24928] drm_gem_release+0x22/0x30 [ 602.462308][T24928] drm_file_free.part.0+0x866/0xcb0 [ 602.462327][T24928] ? fsnotify+0xf80/0xf80 [ 602.462349][T24928] drm_close_helper.isra.0+0x17d/0x1f0 [ 602.462367][T24928] drm_release+0x1e6/0x530 [ 602.462385][T24928] __fput+0x285/0x920 [ 602.462403][T24928] ? drm_release_noglobal+0x180/0x180 [ 602.462422][T24928] task_work_run+0xdd/0x190 [ 602.462444][T24928] exit_to_user_mode_prepare+0x195/0x1c0 [ 602.462464][T24928] syscall_exit_to_user_mode+0x59/0x2b0 [ 602.462481][T24928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 602.462493][T24928] RIP: 0033:0x45d5b9 [ 602.462510][T24928] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.462518][T24928] RSP: 002b:00007f3615f90c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 602.462535][T24928] RAX: 0000000000000000 RBX: 0000000000002040 RCX: 000000000045d5b9 [ 602.462545][T24928] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 602.462556][T24928] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 602.462566][T24928] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 602.462575][T24928] R13: 00007ffff71244ff R14: 00007f3615f919c0 R15: 000000000118cf4c [ 602.464067][T24928] Kernel Offset: disabled [ 603.111701][T24928] Rebooting in 86400 seconds..