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"}]}, @typed={0x4, 0x37}, @typed={0xc, 0x58, @u64}, @typed={0x14, 0x36, @ipv6=@dev={0xfe, 0x80, [], 0x25}}]}, 0x11c0}, {&(0x7f00000096c0)={0x260, 0x16, 0x424, 0x70bd2d, 0x25dfdbfb, "", [@generic="8723af6cb7008e8602ef68a289eff9f603c1fdd90576f8316647b12fbd02a0d6455de689ae8da497c6621bee0cc5d4444ce173cbaea2f624be79823c99e2d026cdbe66380c24d3be1a6ea96e306bd41f8082be7d893677ab8f0d8ca48df4d3767671461697ef0e4a68ddc047fd1a6712457d178e4747b1d2696add4c4e2facec2c632126162c116657b1b8d76e8aca4d95f631a8690f32b6e38af1093bbcdcd3345610c30d", @generic="10385d8f09624dd00aa758214817ef2da65f283d658a7255efbf1d8ad515fae6e2f8ca7b8ca48473815ecc2976199c0076f306893b5c43f848ba2e6c0d0996c6c6a1f441800035c4f4fa111a11d271ba1a2ae209952cfa4bbaa1ad7acd6ffe1477be0ab35bc6a03bbd0b8ffd5c4eccc658bb4ddb95606d37928927c75784218ee956ed360e1475068f7ef3a7d19af8f5b0f8bdd46a1f135ca13def90d9a2183ccf6521bc94ff00201c31cdb681cea7029a90a26e2cd10def2134d1c39715f7b5ca3e204bbb3d2836a3a2cc31e45bd09b973dad8da3866b80ff20ad221b37fa003a4590e78c3a38557ec80d8b4d4a73d2", @typed={0x8, 0x40, @u32=0x5}, @typed={0x3c, 0x95, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}, @generic="dc1aaab37a31a0cda976813be9b6c056e0e962e8d93c22fa301688c8d000a5b4e23dd41766c563eaed43ab0d76b3e013224657bbeeef28f5e10798310b5be55fa737c697199ba7c2b92db7d8b4bd7d83911aa8263b0796b8671d79204fa1f4c3e0f59bb103b10316f7f816ce9d81096479942ab393"]}, 0x260}], 0xa, &(0x7f0000009b40)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x20, 0x80}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) [ 1247.319837][T18478] binder_alloc: binder_alloc_mmap_handler: 18471 20001000-20004000 already mapped failed -16 [ 1247.432537][T18484] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1247.441224][T18473] binder: BINDER_SET_CONTEXT_MGR already set [ 1247.465291][T18473] binder: 18471:18473 ioctl 40046207 0 returned -16 [ 1247.465757][T18486] binder_alloc: 18471: binder_alloc_buf, no vma [ 1247.499451][T18486] binder: 18471:18486 transaction failed 29189/-3, size 0-0 line 3148 [ 1247.530138][T18473] binder: 18471:18473 got reply transaction with no transaction stack [ 1247.565337][T16432] binder: release 18471:18473 transaction 8 out, still active [ 1247.581592][T16432] binder: undelivered TRANSACTION_COMPLETE [ 1247.582155][T18473] binder: 18471:18473 transaction failed 29201/-71, size 0-0 line 2900 [ 1247.608481][T16432] binder: undelivered TRANSACTION_ERROR: 29201 [ 1247.626531][T18488] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1247.647749][T16432] binder: undelivered TRANSACTION_ERROR: 29201 [ 1247.671851][T16432] binder: undelivered TRANSACTION_ERROR: 29189 [ 1247.703119][T16432] binder: send failed reply for transaction 8, target dead 06:16:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:26 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) 06:16:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x7) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xc0000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x2, 0x7, 0x2, 0x2}}) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x48000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@reserved}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) 06:16:26 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00P\x11', 0xff}) 06:16:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) r1 = dup3(r0, r0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x1}, 0x7) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x2) 06:16:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:26 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$x25(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x81) syz_open_dev$vcsa(0x0, 0x0, 0x400400) sendmsg$alg(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40800) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000140)={0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x1c9c380}, {r2}}, 0x0) tkill(0x0, 0x0) fgetxattr(r1, 0x0, 0x0, 0x77) close(r1) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) 06:16:27 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x400000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x3}, 0x8) 06:16:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00R\x11', 0xff}) 06:16:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:28 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xd) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/119, 0x77}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/147, 0x93}, {&(0x7f0000000600)=""/85, 0x55}], 0x9) 06:16:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000400)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000180)="9bea77e53e5f") ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r3, 0x0) 06:16:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae01000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x16) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) [ 1250.363593][T18606] *** Guest State *** 06:16:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x1}}, 0x2000000) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000040), 0x1, 0x0) [ 1250.386937][T18606] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 06:16:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1250.459890][T18606] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1250.535532][T18606] CR3 = 0x0000000000000000 [ 1250.541694][T18606] RSP = 0xffffea0000260940 RIP = 0xffffea00002606c0 [ 1250.552864][T18606] RFLAGS=0xffffea0000260682 DR7 = 0x0000000000000400 [ 1250.561948][T18606] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1250.570871][T18606] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 06:16:28 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x70, 0x4, 0x5, 0xffffffffffff8000, 0xfff, 0x7, 0x3ff, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r1, 0x7}, 0x8) r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003007065766d6e6574312e706f7369785f61636c5f6163636573737b79212e760000000000000000000000000000000000002a41ba3f91c30edd263a98afd7ab1c3923fe7504e48455b8c7014a2a27c07403f277b4d974ae778d77c69167191aa7447e6669f8f300057e9f594bdbf3a2373f68e69f9d733f02c57e0a5da52958bcf7b6d4caf657f53c6b8526c078f2f673fc51b25aa5b6867750b267ee105702b67e57d171de90e606ddb35d8193000000000000000000000000"], 0x54}}, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x40000) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x9) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000100)={'vxcan1\x00', {0x2, 0x4e23, @multicast2}}) [ 1250.580634][T18606] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1250.590590][T18606] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1250.599914][T18606] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1250.626095][T18606] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1250.680990][T18606] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 06:16:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x2, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1250.722265][T18606] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1250.779962][T18606] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 06:16:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00T\x11', 0xff}) [ 1250.850184][T18606] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1250.919174][T18606] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 06:16:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000019f40000040003003c000100406d6903005f74797065766d6e6574312e706f7369785f616b6c5f6163636573737b79212e76626f786e6574302d73797374656d00000000"], 0x54}}, 0x0) 06:16:29 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) [ 1251.001891][T18606] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1251.068718][T18606] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 06:16:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r1, 0x104, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @remote}, 0x9f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @mcast1, 0xff}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) [ 1251.135425][T18606] Interruptibility = 00000000 ActivityState = 00000000 [ 1251.155976][T18606] *** Host State *** [ 1251.166119][T18606] RIP = 0xffffffff811b40b0 RSP = 0xffff888090f378e0 [ 1251.188441][T18606] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1251.209172][T18651] validate_nla: 4 callbacks suppressed [ 1251.209213][T18651] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1251.222457][T18606] FSBase=00007f59b7d51700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 1251.252959][T18606] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1251.280504][T18606] CR0=0000000080050033 CR3=000000008fd66000 CR4=00000000001426e0 [ 1251.298884][T18606] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87201360 [ 1251.331827][T18606] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1251.357351][T18606] *** Control State *** [ 1251.367922][T18606] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1251.385317][T18606] EntryControls=0000d1ff ExitControls=002fefff [ 1251.399063][T18606] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1251.416651][T18606] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1251.433820][T18606] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1251.451050][T18606] reason=80000021 qualification=0000000000000000 [ 1251.468034][T18606] IDTVectoring: info=00000000 errcode=00000000 [ 1251.481564][T18606] TSC Offset = 0xfffffd606e0054ef [ 1251.494169][T18606] EPT pointer = 0x000000009f92001e 06:16:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000180)="9bea") ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r3, 0x0) 06:16:29 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xa, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1251.612488][T18651] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x48, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:30 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) [ 1252.006930][T18670] *** Guest State *** [ 1252.031258][T18670] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 06:16:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4c, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1252.111078][T18670] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1252.186526][T18670] CR3 = 0x0000000000000000 [ 1252.209212][T18670] RSP = 0x0000000000000000 RIP = 0x0000000400000003 [ 1252.246512][T18670] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1252.274850][T18670] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1252.295417][T18670] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1252.306075][T18670] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1252.315010][T18670] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 06:16:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x66, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1252.330319][T18670] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1252.339331][T18670] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1252.348383][T18670] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1252.357876][T18670] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1252.425636][T18670] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 1252.445434][T18670] IDTR: limit=0x0000ffff, base=0x0000000000000000 06:16:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x35, &(0x7f0000000100)='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000640)) sendmsg$nl_generic(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000080}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x224, 0x29, 0x201, 0x70bd2a, 0x25dfdbfb, {0xc}, [@typed={0x4, 0x63}, @nested={0xe4, 0x4b, [@typed={0x8, 0x9, @pid=r1}, @typed={0x4, 0x70}, @generic="f6a8cdb4d24a5e8b543a1969c036c67f013fd54a0c20ae918e4cf8daf6aa60005d9e9e9cd9c0a41978f85b9b65538735481fa9411639bb65cf85a05f816143e4f088464a1c312398625c1821cef793bc84f5187963b3062ee218f1719dc000461e173abcf0b517f782d2eb247286cff7f0bca83187448897cb2e1f801e46b858824577ff6f7ad6aeb3c188288915550bbe10f966335b41ba0024efa4fc7673e030a8a05c7691aa38eca3d17cf6e195815d54c57fab08f5dfbe36947bba7a4e31f0fc94586a4cf9cc323e5f6f51dc", @typed={0x4, 0x74}]}, @typed={0x4, 0x62}, @nested={0x11c, 0x1b, [@typed={0x8, 0x6f, @ipv4=@broadcast}, @typed={0x8, 0x79, @pid=r2}, @typed={0xc, 0x18, @u64=0x7}, @typed={0x4, 0x7b}, @typed={0x14, 0x39, @ipv6=@dev={0xfe, 0x80, [], 0x1b}}, @typed={0x8, 0x80, @ipv4=@multicast1}, @generic="d692460d7afdf6d59083b6b304d525fbf1acf8d62ffd2b262525b2e45e3dd9cd825f687f2ec66a8a974fea54802ff507e9559a0565a0132731335deecf54f05d2bb36861ad644a5082e594db87925f54f0007f811e2d685c898ed42ea809fa68a9c2710d3b2d44c671a1f7d374d47936dca0669cca8ecd9a20b4c0ce08d11398d252eeb0da4b203bd980bcabf0c9a8227775aa527b412518f46c04e4e99a76356db633ca183187c60c6fc614dc246c99c6fbe078175250cc64297216b70464540c35f80fce01c3fc8510941dfb19038b34a39a9cde397ff091"]}, @typed={0x8, 0x46, @uid=r3}]}, 0x224}, 0x1, 0x0, 0x0, 0x80}, 0x8000) rt_sigpending(&(0x7f0000000680), 0x8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x200, 0x0) [ 1252.469023][T18670] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 06:16:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00V\x11', 0xff}) 06:16:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) [ 1252.538461][T18670] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 1252.570750][T18695] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1252.605575][T18670] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1252.674525][T18670] Interruptibility = 00000000 ActivityState = 00000000 [ 1252.683286][T18703] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1252.705430][T18670] *** Host State *** [ 1252.711820][T18670] RIP = 0xffffffff811b40b0 RSP = 0xffff8880523678e0 06:16:31 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x68, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1252.734622][T18670] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1252.812384][T18670] FSBase=00007f59b7d72700 GSBase=ffff8880ae800000 TRBase=fffffe0000033000 06:16:31 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) [ 1252.855378][T18670] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1252.866741][T18670] CR0=0000000080050033 CR3=000000009a716000 CR4=00000000001426f0 [ 1252.892140][T18670] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 1252.930807][T18670] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1253.005369][T18670] *** Control State *** [ 1253.012360][T18670] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 1253.021205][T18670] EntryControls=0000d1ff ExitControls=002fefff [ 1253.027852][T18670] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1253.035749][T18670] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1253.043369][T18670] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1253.050966][T18670] reason=80000021 qualification=0000000000000000 [ 1253.058244][T18670] IDTVectoring: info=00000000 errcode=00000000 [ 1253.064615][T18670] TSC Offset = 0xfffffd5f8b615d06 [ 1253.069961][T18670] EPT pointer = 0x0000000090a0201e 06:16:31 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6c, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:31 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) syz_read_part_table(0xe01f0300, 0x0, 0x0) request_key(&(0x7f0000000100)='pkcs7_test\x00', 0x0, 0x0, 0xfffffffffffffffb) 06:16:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d0000000039cedffe071c07870ea40f4746efe6837d3d327444477cd9ce8c00b9fd4d51b633421b3baeacca956ee8e441acfd5589f21074f698fb81e16f8b6ba7c59f46c9faaec7daacca2be25bbdf374e2f8e65a492ecc5d0fcd52d35632ebe3e04e2617ccf0559865af49c6f7e98c4245d379dffd2e3586a4b8af9d66d3f491f389e510e9169d5fd3268fc232fef9139891d305"], 0x54}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa01, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000080)={@dev}, &(0x7f00000000c0)=0x14) 06:16:31 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x74, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1253.504690][T18737] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x7a, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00X\x11', 0xff}) [ 1253.839152][T18737] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:32 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 06:16:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x1ae, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:32 executing program 5: socket$netlink(0x10, 0x3, 0x11) 06:16:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) setresuid(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 06:16:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x33f, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:32 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x4000) 06:16:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x84}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302deb11fca440b073797374656d000000007bcd7c5ca3c1b85c7b38ba2e80f18988fa7038852518311f09903dc991f348cc740b582a8cc68829b5aba29f25f19e98468223517b9f094a269526a806953e50050378144c5a1747087235b67aaba848f412edee449ec9d2c3afe079058a8f"], 0x54}}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000002c0)={0x1, 0x102, 0x6, {0x9, 0x6, 0xfffffffffffffe01, 0x4}}) 06:16:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) [ 1254.842122][T18798] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00`\x11', 0xff}) 06:16:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xa00, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) sendto$inet(r1, &(0x7f0000000040)="16", 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r1}, {r0, 0x4004}], 0x2, 0x0, 0x0, 0xffffffffffffffb7) 06:16:33 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d00000000ed867733be51b9db6c4e2f2728ef6d2a6b2527b38921179ecbe905ae899689a5bfc597003a5251bcd2624256c1eec45adc68463dfeec2223b558b0a518097f288b44878a51a64c915ab35c84832f6a0d99d03fdad159019ceb02f3af6db50b8d0fcc6d8bd66b62b4ff61ba07ea0f5becb1e22b581e630ff9435a89f3ef38da966a2b77130e193f88af0606438c2704eb71c65eba0763115f69832d1e2a651e6125de45f446b226b39197929c6dc180c77dfd82863475c5e4c6132748d8c56ec75439aeff908d6c081d9067de4e3f8eef71fba69ed95d559f805eb37fcb36b99d329da2620130fbe461e0000000"], 0x54}}, 0x0) [ 1255.059818][T18798] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1255.181527][T18821] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xbe7de) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000003c0), 0x4) r3 = dup2(r0, r2) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) 06:16:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x2000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x400001, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000002c0)={0x1, 0xd657}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1800c0}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x7, 0x80000000, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) [ 1255.607268][T18848] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x3f03, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:34 executing program 1: syz_execute_func(&(0x7f0000000000)="3666440f50f56664400f9f3241c3c4e2c9975842c4c27d794e00c442019dcc660f3a09f307d3196f") clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") execve(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ptrace(0x11, r0) 06:16:34 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\xfc\x11', 0xff}) 06:16:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={r2, @loopback, @multicast2}, 0xc) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18, 0xfffffffffffffff5, 0x1, {0x7}}, 0x18) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000180)={0x4000000402, 0x78b9e319, 0xfff, 'queue0\x00', 0x2000000008}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000200300aa7b5e71bc6f3ceab25dff0a0000a0fa0000000005000000040003003c000100406d0500000074797065766d6e3d2c07c456856574310100008069785f61636c5f6163636573737b79212e76626f786e657430c23f6de60da71f4191837d1231f0545ee5a358efe75cdb1b48a269876e314b5a07d352070c5688000146eccf75a64d85a164cb692159e7aee509186e97182a7decffcae1d25caa9b"], 0x54}}, 0x0) 06:16:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000002000ff0a0000000000000000050000006a000000406d696de9c3e5276509000000fc4aadae384d446d6e6574312170527369705f9e00080000000083ca233abf5f79b96573737b79212e76626f786e657430257379fb674000000000000000d06da74617"], 0xfffffead}}, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x10001, 0x0, 0x3, 0x2, 0xde}, 0x14) 06:16:34 executing program 1: r0 = creat(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x0, 0x7f}, @sack_perm], 0x20000000000000d0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 06:16:34 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f0000003380)={0x8, "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", 0x1000}, 0x1006) r1 = socket(0x9, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000004600)='keyring\x00', &(0x7f0000004640)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004740)={'sit0\x00', r4}) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000480)=0xe8) r8 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x3f, 0x4d00) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003340)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000003240)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003200)={&(0x7f00000043c0)=ANY=[@ANYBLOB="a0e00000fcbb0b11154402aae87f9195a6303bf5b36aa4300ff7a210f65c621bc661146471479ef52f22e4", @ANYRES16=r9, @ANYBLOB="00002bbd7000fbdbdf25100000000800020004000400240009000800010005000000080001000400000008000100ff0f000008000200010000002400070008000100040000000800010008000000080001000000010008000100080000001c000600080001009dde000008000100080000000800010001040000"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x95) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000004480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000003300)={0xffffffffffffffff}, 0x113, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000044c0)={0x9, 0x108, 0xfa00, {r10, 0x67, "ea92f9", "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"}}, 0x110) getpeername$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000005c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000600)={'vcan0\x00', 0x0}) seccomp(0x1, 0x1, &(0x7f00000031c0)={0x7, &(0x7f0000003180)=[{0x7ff, 0x0, 0x5, 0x9}, {0x7, 0x8, 0x0, 0x9e4f}, {0x8, 0x9, 0x7, 0x1}, {0x5d7, 0x1, 0x8000, 0xfffffffffffffffc}, {0xffffffff, 0x2, 0x5, 0x7fffffff}, {0x1f, 0x8, 0x2, 0x8}, {0x3, 0x8dd, 0x1, 0x7ff}]}) clock_gettime(0x0, &(0x7f0000002d80)={0x0, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000640)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/199, 0xc7}, {&(0x7f00000007c0)=""/243, 0xf3}], 0x2, &(0x7f0000000900)=""/113, 0x71}, 0x7ff}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000a80)=""/138, 0x8a}], 0x3, &(0x7f0000000b80)=""/90, 0x5a}, 0x1}, {{&(0x7f0000000c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000c80)=""/253, 0xfd}, {&(0x7f0000000d80)=""/182, 0xb6}, {&(0x7f0000000e40)=""/117, 0x75}, {&(0x7f0000000ec0)=""/231, 0xe7}, {&(0x7f0000000fc0)=""/114, 0x72}, {&(0x7f0000001040)=""/90, 0x5a}], 0x6, &(0x7f0000001140)=""/144, 0x90}, 0x7}, {{&(0x7f0000001200)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001280)=""/196, 0xc4}, {&(0x7f0000001380)=""/42, 0x2a}, {&(0x7f00000013c0)=""/229, 0xe5}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/188, 0xbc}], 0x5}}, {{&(0x7f0000001680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000001700)=""/162, 0xa2}, {&(0x7f00000017c0)=""/30, 0x1e}, {&(0x7f0000001800)=""/242, 0xf2}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x4, &(0x7f0000002940)=""/1, 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002980)=""/92, 0x5c}, {&(0x7f0000002a00)=""/254, 0xfe}, {&(0x7f0000002b00)=""/173, 0xad}], 0x3}, 0x1}], 0x6, 0x61, &(0x7f0000002dc0)={r13, r14+30000000}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000004680)={0x0, @bt={0x457956f1, 0x3ff, 0x0, 0x3, 0x8c, 0x9, 0x7ff, 0xeb, 0x0, 0x9, 0xa1, 0x200, 0x5, 0x3, 0x4, 0x182dc68caa98f034}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000003140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2042000}, 0xc, &(0x7f0000003100)={&(0x7f0000002e00)={0x2dc, r3, 0x0, 0x2, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x1bc, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r15}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r16 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$nl_generic(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) ioctl$BLKBSZGET(r8, 0x80081270, &(0x7f00000032c0)) 06:16:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4800, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1256.711135][T18906] validate_nla: 1 callbacks suppressed [ 1256.711145][T18906] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:35 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4c00, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:35 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:35 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6600, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1257.262300][T18906] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:35 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6800, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:35 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\xfd\x11', 0xff}) 06:16:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@generic="dd1745952ce05e36dca8ca5dff852cacbc2e3762759cbc4f71f6e37323d98d0616c3e71cd9d39c0e3163bc45e18279e15efac94ab0212c222ae7cd5925a3dd7c4952912534e1d7ba8d1d63363dcb93520bafb0843577088504b9c9f2206656acf7261c2e132877aebbf4f4c4b3a0d1f94e448c14d7a9fa5d5f3316b14acee210c4a7e80e944e537d12aea65692d289d4e6b18c0c41ac0c9d7649323d3887bce36989b43ba223f951f3115baa5bb669e697285ea9031da2ebecf12dd9c93ee7f3b1"]}, 0x29}}, 0x0) 06:16:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) socketpair(0x11, 0x0, 0x1000, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b795cbc8216c2bfa10f909e45a0212e76626f786e6574"], 0x54}}, 0x0) r1 = getuid() r2 = gettid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000340)=0x0) sendmsg$netlink(r0, &(0x7f00000019c0)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xc, &(0x7f0000001980)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="900000003500020025bd7000fbdbdf25409f945b9868f1996ae6df3c7a1be3ffd8b1f1e06ff0e57281c4d7c88dc0a295cb03c9d21ae5553092dfda6bd05b157d30330dfb40686d37a6524e536b48fde5d149282eb201f4d4f5f91c4360fc382b2f5ec8ea86c2430b9ea88371639bdeffc455331dc4038572a4331d58edc7a908006e00", @ANYRES32=r1, @ANYBLOB='\f\x00m\x00', @ANYRES32=r0, @ANYBLOB='\x00'], 0x90}, {&(0x7f0000000240)={0xd4, 0x1e, 0x4, 0x70bd2a, 0x25dfdbfb, "", [@generic="a5482418e824e819e649a17e1381a1ca1e555d96d816cd9cffb0a58ff07488597a6fc1c884feb6e1e90f8a15858a9f931235c063a368cd4b35576d746f68a60f776ee265c17bcec93d7daf0c3f999586ccdc82e82c51744625e41ba8c0e8ecdd409b6e25ecd9e3240ad0e219027302e982bdcc206cc3152bce190f99d80ee90e43fae302a4172011605d50e6556a8574c60da0b78216f0425d8f69e9a40ac66dbcd2ff0a81a3aa73818e989a24957517ae", @typed={0x8, 0x48, @u32=0x101}, @typed={0x8, 0x6c, @u32=0x5}]}, 0xd4}, {&(0x7f0000000380)={0x15f0, 0x42, 0x1, 0x70bd27, 0x25dfdbfe, "", [@nested={0x324, 0x4c, [@generic="d65d06c61ef074ba68e4ce13544ef7833e7d0bb164b0c8e4be26808859e8bfd0337c683ac7b32dbad7339da82a434765230f490b4d1cd823b1c1e136532b", @typed={0x8, 0x8, @fd=r0}, @generic="1b588b0212d169d74359669d416f4e5e61937b03d0596380393e68fb1bac498b7d9279cb96149cc50de831c47ecc638867becedf4ee06cfc38a109055c70fed0dcedfee682e5b63b8ed3625f5629be333b6b44d47531aed9585008ff5ebd669acef6c095478e8813bd54c274ce5b8999d24bb21912eb1316e9300216", @generic="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", @generic="bebf24953d1cbbf52feba404ffb09ccaad2c3e6315160ad38985ead342f884cd68842ec21f230ee2d018fcc9cf89fd2ca86e96b4025aac7a18b605f63ed8a5735b722a5c1778172d94f46ab0e13d79dcd33f3af2e768d228c9ffe7bbdd531f1634efe5cf65a3f2499cd4bb11fa6ee409058cc59d463288366ae42cd632f47e1863459e2ea8905dcfb6fffb2c7cc64538a24ab4aaf91e4ee62ad8e28a3ddd8aab982895c1ad71793c6b36f62569cf70115b361aece185f169b82c07963d63e12cea68bbcc56b1a2125f2d210e7bff309050a224f5ddc51a5075389f61a3e3ecc117bf83689d9b8f7f7c169b7d79bd2cf93413ffb76c0132", @generic="93064acfb6177cfcc6df497832808ced41bc7bb4965eb58d9e7375aa19f49639f10074fe8179b7ab12c148cb5199a6ece441fd002cbf38ac59a4f4cdfc6633d9175b873624cc226904de428b6d6a", @typed={0x8, 0x54, @pid=r2}, @typed={0x8, 0x6d, @u32=0x62}, @typed={0x8, 0x83, @u32=0x1}]}, @nested={0x12bc, 0x7b, [@typed={0x8, 0x30, @pid=r3}, @generic="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", @generic="4c9dabc53a60df0d5af37c5a0b3e19f66baf79178361bd24d3dd9f3aea8c85e4f81376007e7a7060c806259583573270f22b9208f771aac43d81041d037d3fdc9647a14b18b76f3881d272ef79e51e27f56d84c39c28530aacfe199fee0693607fd9f537dbd3dd2535568c674476dd88b60f356b8e53e6c194f4addbb1e9dc1b325e6df2fe3d998a4beb12d891ebcb715bce3daa46ce273c677aa563", @generic="0ea4b0a6dd993610e4a730fec62908f6cbf0af44d5c4ad89cc9c077f560a5befcf26ef18a9e2753179d9b9d2fca00a8b1d7f8176c2afb973891e9d2202cf9ebd49b98370a35d7035947737088414dbad09cffbcdf18759a19ddeab53c95e2485047223e3a8ffb2af8b7a6a87ea44b41632c64d3db7201505190b6fdb4c446b18133e5fa59af8d28875c70308e0e8dccfa145bfa61e5349c9ec83da1f6708909f7ec90e24e9c472003e03b08c875a5a", @typed={0x4, 0x93}, @generic="67ea67f13efdd2c272c603a233595bc60a496d23ec976ff7f01ffff33fb49d2ca265ec8906e3495c88ae034b2dbdf0011456f1d48d705dd1eff6d4f29ba269ff", @generic="1939f12f46259058490f92599b1120892142f12c6e15d8f0a45c68a7cf5f67fc9772153ccf6b7b33011b8669d592064ecb666e15f7d410477b85fa315fe513dd91dae6cf79db78f918e4a73859d4a1043854444c99ae1b287dbea6ba36df5edb2ca7849a6399b7b8f8954fb9ffddf0a391e2150cf3b631f12d1eb12ee4189370f7148a7ad7dcf3f64d20ce1c88a2419780ab3e80fffd35c84003c3e51d14204aca3e2b4e5a4fcac5a94e32f126c763e48bbb3b9af31e476430b091c057f6f8d02f53f83751629d779e485423eb36d399e108c25e90e645a3a2dd1de5e0aa025de4246b11df57b9", @typed={0x8, 0x82, @u32=0x6}, @generic="0769313b30ddab9d9220a627cc0971c947e2148888276e5f6bddd61a8351d28f72e8fd98edfb91f97f581ec409934a"]}]}, 0x15f0}], 0x3, 0x0, 0x0, 0x1}, 0x0) 06:16:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6c00, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1257.908293][T18957] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002580), 0x1321ce) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x40001a1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r1, r2) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in, 0x0, 0x0, 0x0, "9a78720d0e386f5fa19cb38f80051de5eeb1cc8ea06e1d01b245fd3f69d655f12189f9c721b0fe7fbd1186e0fa015bbb604ec7b554f6a772b2a3207a89519c3a2ab64ae54ffc0505e00eaa3cf059c044"}, 0xd8) 06:16:36 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x7400, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x7a00, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:36 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x5437, 0x0) [ 1258.589870][T18957] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:37 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x5437, 0x0) 06:16:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xae01, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x008\x13', 0xff}) 06:16:37 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x5437, 0x0) 06:16:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x1000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYRESHEX=r0], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x5000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000029bd7000fddbdf25040000000800030009000000080005000100000014000100000000000000000000000000000000000800030f6f000000"], 0x40}}, 0x1) sigaltstack(&(0x7f0000ffb000/0x1000)=nil, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001340)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340)="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", 0x1000, r1}, 0x68) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001500)={0x0, 0x8}, &(0x7f0000001540)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001580)={0xb6c, 0x0, 0x8209, 0xc7b0, 0x8, 0x3f, 0x90, 0x4b, r4}, &(0x7f00000015c0)=0x20) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000014c0)={&(0x7f0000000200), 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x7c, r6, 0x402, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x25}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200000000}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getsockname$unix(r5, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) 06:16:37 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x4, 0x800000000105082) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)) fstat(0xffffffffffffffff, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x101, &(0x7f00000001c0)=""/185) sendfile(r0, r1, 0x0, 0x3975f324) 06:16:37 executing program 1: 06:16:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x2000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:37 executing program 1: 06:16:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00 ', 0xff}) 06:16:38 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xa000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:38 executing program 1: 06:16:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:38 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:38 executing program 1: 06:16:38 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x2, &(0x7f0000000000)=0xbf207ff, 0x100, 0x0) get_mempolicy(0x0, &(0x7f00003e8000), 0x401, &(0x7f0000336000/0x3000)=nil, 0x3) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0x80, @mcast2, 0x8}, {0xa, 0x4e21, 0xd5, @loopback, 0x1}, 0x2, [0x3, 0xffff, 0x6, 0x2, 0x6, 0x80, 0x3, 0x40]}, 0x5c) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:38 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x20000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:38 executing program 1: [ 1260.371532][T19077] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:38 executing program 1: [ 1260.577537][T19093] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00%', 0xff}) 06:16:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffc5}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 06:16:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x3f030000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302da53f6c5ea73d73797374656d00000000"], 0x54}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x2, 0x40001) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x3a79}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0x504f1c93, @empty, 0xffff}}, 0x100000001, 0x2}, &(0x7f0000000340)=0x90) [ 1260.896902][T19107] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1261.051480][T19107] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 06:16:39 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:39 executing program 1: mkdir(0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) read(r0, &(0x7f0000000500)=""/4096, 0x1000) 06:16:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x40000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f63636c5f6163636573737b79212e76626f786e6574302d73797374656d00000000"], 0x54}}, 0x0) [ 1261.384619][T19137] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x48000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:40 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4c000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:40 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:40 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00%', 0xff}) 06:16:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x8, 0x8000, 0x2000008000000001, 0x1}, 0x2c5) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe59, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x0, 0x22f, &(0x7f0000000280)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ', 0xffffffffffffffff}, 0x30) perf_event_open(0x0, r3, 0x10, r1, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x39552d8f1d154a98) unlink(&(0x7f0000000640)='./file0\x00') recvmsg(0xffffffffffffffff, 0x0, 0x0) close(r4) socketpair(0x2, 0x20000000000001, 0x0, &(0x7f0000000980)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x64) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x73fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:16:40 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x66000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4000000010) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0xe, 0x800) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000180)=0x4, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001c00ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f61636365738f7b79212e76626f786e6574302d73597374656d0000000030ef211d16783b13133ca947e2b84db54598ae71ffe56c75780dce19af282259e733099998bbbcbe36fbb9542e3b"], 0x54}}, 0x0) 06:16:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:40 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x68000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x8, 0x8000, 0x2000008000000001, 0x1}, 0x2c5) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe59, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x0, 0x22f, &(0x7f0000000280)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ', 0xffffffffffffffff}, 0x30) perf_event_open(0x0, r3, 0x10, r1, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x39552d8f1d154a98) unlink(&(0x7f0000000640)='./file0\x00') recvmsg(0xffffffffffffffff, 0x0, 0x0) close(r4) socketpair(0x2, 0x20000000000001, 0x0, &(0x7f0000000980)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x64) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x73fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:16:41 executing program 5: mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1401000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x700, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xf0095ae4f2a09e29) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x281, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:41 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6c000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x5, 0x8, 0x8000, 0x2000008000000001, 0x1}, 0x2c5) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe59, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x0, 0x22f, &(0x7f0000000280)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ', 0xffffffffffffffff}, 0x30) perf_event_open(0x0, r3, 0x10, r1, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x39552d8f1d154a98) unlink(&(0x7f0000000640)='./file0\x00') recvmsg(0xffffffffffffffff, 0x0, 0x0) close(r4) socketpair(0x2, 0x20000000000001, 0x0, &(0x7f0000000980)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x64) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x73fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:16:41 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x74000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip_tables_names\x00') setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f00000001c0), 0x10) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x4}, 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x10000000010001, 0x0, "b60110a74706edd7db860a8d58a70eba75a39952af8867fecf10e977fc68128194f12e155cb09c730647d05a80bad555a8c93b0d74e646cf055643eeff28e8290d3431f218f22c2d00"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$tipc2(0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 06:16:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x13', 0xff}) 06:16:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a0000000000000000058dbf730c43f9c0058fa7b85815e976e1000000040003003c000100576d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f"], 0x54}}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2d, &(0x7f0000000240)={@remote, @empty, @remote}, 0xc) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2000, 0x0) write$sndseq(r2, &(0x7f0000000100)=[{0x1ff, 0x0, 0x8, 0x8000, @tick=0x1f, {0x6, 0x1}, {0x7d, 0xd44}, @queue={0x93c5, {0x5, 0x6}}}], 0x30) fchmod(r0, 0xa) [ 1264.041726][T19249] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1264.153738][T19249] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 06:16:42 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:42 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x10000) bind$llc(r0, &(0x7f0000000100)={0x1a, 0x11f, 0xfffffffffffffff9, 0x0, 0x1, 0x6, @dev={[], 0x13}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$RTC_UIE_OFF(r0, 0x7004) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x7a000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1264.579633][T19281] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xae010000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000040)=0x8, 0x4) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000006766c744240600000200670f011c240f20c066352000000a0f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, 0x0, 0x0) [ 1264.731592][T19282] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x100000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:43 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x200000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:43 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xfe}) 06:16:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) fchdir(r0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) [ 1265.689133][T19321] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xa00000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1265.923643][T19333] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x2000000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:44 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x3f03000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x80008000001c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5400000018205760bddf610fa91d337d214fd6c32000ff0a000000000000000005000000040003003c000100406d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d0000000000000000000000000000"], 0x54}}, 0x0) 06:16:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xe) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001700)=0x0) r4 = getuid() sendmsg$netlink(r2, &(0x7f0000002f00)={&(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfe, 0x6000000}, 0xc, &(0x7f0000002e00)=[{&(0x7f00000002c0)={0x122c, 0x24, 0x2, 0x70bd28, 0x25dfdbfb, "", [@typed={0xc, 0x1, @u64=0x81}, @generic="36bb0c9bfab8df038cc863fbdd5ca0767388e0d96f1f87c735c798592c9bdc0676d53210876d62dd03088d2a1a6b7b090a4ccf56bc884a42bd652fdcb881c1d28eb3982e3b1659f73b02b112714e2baa4f7061d98145976ddefe5170985bec177e1186682af23147", @nested={0x10fc, 0x10, [@generic="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", @generic="5bf6b7a93ef4a22530448647cbadb6458c52e77b2e3381677320067548b5d90e3a39af7cae2f68c431729c71da540666cbda5c0c2fa9b3c9c19e27830cc6253848cd82d341d8fc0e54cbfbd05cff67eed99ee00ffcb282c1fbbf6eaa63cf2c4085556848d4952f8fc7f752dc72b705346fc83809262f43219d25e93664875e00af086fbbf44fb17161adfb595ef410fd3d15d2a1f1799743ed2a297b4ceac50913223b26ca4a2f7d3e8fad626d13b137455efb5ede3be5fdbe849c97c11808fa2ac3bc99beb59be18082f2d48a866f0296cf15884b4eeea95421f111c51ee9108764ab536137e07957fe03863114efae384233be9b16"]}, @generic="bd999cba6685eabf2c293bb392b311372fed030bfb1a36604e039dce34f31727aad25d5b938f893b549ee5d8d2d8757236de85843bb436c61e835bd7fafebae97cce546011babf47b3c2062d0884ca99600fa531b0ca16aec716bf6c346888947c60a786c271e9b475222da4ed945e", @typed={0x8, 0x66, @u32=0x3f}, @generic="903542b9c59e95c26b154a0fc01fa3c60c14932280e3b5fb0753e6d84231c7bd5205a67e2e85dceed082cc93059f22a1d21de0771f"]}, 0x122c}, {&(0x7f0000001500)={0x1cc, 0x19, 0x0, 0x70bd29, 0x25dfdbfb, "", [@generic="b6d0cd726426af595b58e0a2da42005811198a77d43a3be55666c4f588622a5f4f", @typed={0x14, 0x4d, @ipv6=@rand_addr="9ea7ef6c561d7d1d195167de505d8528"}, @generic="abbe68706c84e7f75e3ec6361d2e2a5ff41506d008ea2f31a6686d5074353daf189b5a4e5c6f4182cceaab02c1270643b25ab816fc4cfb321992c349a522ef0bc20b5082b4c3254afe903e3f2f4c45a7260d657154b30f5a98cc1bc42c543d07fe3c9cf150612655087fffc11cadc7ab25536c7b6b1bd7c8c063d1021096bf2b6a701f7744f3c38ae141ed8f21", @typed={0x58, 0xb, @binary="8692b92361a6e51c5f7acee07e7e15c79be1107d80afa45f55978e4fdc52c808554fc57167fd6333fb37346f225dd6207b417a49de77dafcd1bf3f8967b4d721ba09533a01cf52fe9527ec2c684dd27ed3"}, @generic="417227337271b5875cb7be500d775bd22be84fdf34cb517b5b59ff4e2563ecf44640d000b86e7a022f211fc878e1309ac0a39e2cf6c32a8f1b56d8d885c7597e", @nested={0x8, 0x3b, [@typed={0x4, 0x4c}]}, @typed={0x14, 0x24, @ipv6=@dev={0xfe, 0x80, [], 0xb}}, @generic="7737812d7d424a2a677b087410033f89a72681439f7820c0e3c74252da82c922399bc73e5e85455761fd7243d7c753661a91b13c32266221517e731d3225a44d778d23425193"]}, 0x1cc}, {&(0x7f0000001740)={0x1474, 0x39, 0x8, 0x70bd29, 0x25dfdbfc, "", [@typed={0x80, 0xb, @binary="bee0e1ba3ee585082a2c9cf8f6664c7e7fe37c79e787560d6c5e5b90f8d8122661a9e59fdf0d0efab830552eed66a9b8bf6dedf420a59e6fb7604269597a7a7121d54516c3a16da12f2a74bedb9ac7800e5b371bdf37dddd71436287d086e1de28de7b7b2058830bdcc1fbb046803bfeca563c2f3f4abce1e040"}, @generic="970eb33b816338694989c2d0dbc4820b9872ac90037ae354ff5b542808995298335fa1101d3ed67648639b70758a5b900f4418ed6ebb4e8eef9313ad5d6ffc629da137f10ba5068573411fac4c9a14582b5ad3144f9934247586d848522d1489c39fe6e9ca97761e628180e006794a6bcc65edf15623bf2901c71fb4e72b150b6ec6ed5eabc01bf4bea7d2b632c9bf1189d1c09595a8a21d0fe7959fea58066915dd9172426d5ebbd4177867b417871276b3a6e536fb6c32983070a09e4db4a8bb462836d53588d6", @nested={0xc, 0x1, [@typed={0x8, 0x63, @str='\x00'}]}, @nested={0x218, 0x14, [@typed={0xc, 0x6f, @u64}, @typed={0x38, 0x1f, @binary="aca34b9cd50fb0ce8afe53087464e17d1f6a6bf9d170b0c41bb5aa1fbaf94d5c14ce058f51a04741f3a295f90952c112358e"}, @typed={0xc, 0x57, @u64=0x7}, @typed={0x18, 0x3b, @str='/dev/dlm-control\x00'}, @generic="a579a94a50cb41c67fd173a574f4c2001609e7a10be719543b0b50d589e3f02cf803be4fd52d600219a39ca4ccab478281bf7bcfa577997da502c979e7e098af6e68e5f090109847885a5243ed29172f3b02e8502426b02659df50354ab7f169cb249b3b82deead091a00c67d94a8b137e7caab3fa6f0d93e16f26f9db94b86d1e8945b8cc944a4af46f8c3a8e3cb919dded54618836a5a41c80eb913d013a8b55d6418e88cd5a5e633bb467", @typed={0x8, 0x5, @pid=r3}, @typed={0x14, 0x7f, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @generic="df5bef4040b01095121d654be01ede959315dc22293dab31d7251f64e6f780d9d8a2f15d6c3eab06103bb2bfe63abfe8015ab868b7abf4868bd2c94feb983d743d885d86d22e792fc95b357550b9450baf7b93320e62fca83a67a4fe927d43c42b635f5ff26c3679610737154135a312910493bd1432e70c9496dd27454f95120b0a1ce19cb59ecdfb9b71ef39c42b87675dbc6574bfe44bcf65297e9ce405f28fc482244d7560eef3228c47dfc4d67f4ae198a45192ccbde23646adc3bfce788d5032167755653eb3175ef0c0", @typed={0x14, 0x1e, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @typed={0x8, 0x2b, @u32=0x1}, @typed={0xc, 0x3d, @u64=0xcde6}, @generic="06693eaa224146c16728d86d5d9e1f2f71b4aab2b3291f4b771e26f204dd3e8dd3a59dffba06a5f1088b59e173b0262bc6e9e8ea845e6c74307aa3c08ceea6cb971badfe04058cbaa45516d11d575ffd1ef25cf3c880a49f2af4e410df950ab39368c34a99c1600244ea2e093af79bcf04d761f1238fd823ee20432c7524e4b6c3cd2f6402825b74fdf5024083f5f1f40fbb565ae82363357040a01066b23adb356e0868a37ec8fbef9ba5ef0d6fc8dc09b1de99b085508e048a98ee388f614695fb1a860f3dcf37cf865c1d2646722e375e7de142aebeddbf90f7058707ef417b13b7", @generic="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"]}, 0x1474}, {&(0x7f0000002bc0)={0x218, 0x16, 0x328, 0x70bd2d, 0x25dfdbff, "", [@nested={0x108, 0x68, [@typed={0x14, 0x1e, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="59b4e1ba78389c75a9ac172f1f43f3ac619797fdf77ec2830f7839e83cba229270219db5b247aa8b752a145e3c6a8a652bf4181db9c67b77f65944abbb2d4d8832297b4b4be72cb10021c2b348a4ea62af8df5ce9f398bbdf4", @typed={0x8, 0x2c, @ipv4=@loopback}, @generic="8529d286e59d6f34bb143970b9f37347ce73e4d7a1d3da73c77e222ac67cc92d8c650ce8d91bff083d408f3c4b04b37a762f9ce918c19a70e4ba968c112557476f5ed06f3f71ad529a15f625d07dfe98b60f156c2805c0ec345b31cac229517eecd1bf2d0b2f74694fb76e3cf7ef4641d7463480949be403ae6d265d5d84687e4ba8d151fe9176dc8fdd8936"]}, @nested={0xf8, 0x79, [@generic="28bb2611080fd1706b473487edce22e147ad29c1596e1b6b07f3624ea9b9d6b247bac7ee2f5e2442dcaf6f002a38d41d7b9db45c90bbb97ecb505fa1dd39778288ade29f87dfbef04fce290a9c61e3541d3430b8be932b3f2a5d84195f648f033a0571308d7c0848254b4b67568efa551598", @generic="8b61d99f62593db5da9c092bac9c0deec2daf15926d68261621f9fad17c587f9d1e8d5fbcdae50947464549ce4b3ee993799374460d17d65948d4ee6583ada96bb92a43a7d698291d9beb1f02715de406a1a118cfa3b29dccde6463a70f5f42bb2253928f09dbee89aa0d0fa740ef08d4fb8588c8af95a7cfdf6d31ca9e1f171a40f"]}, @typed={0x8, 0x31, @uid=r4}]}, 0x218}], 0x4, &(0x7f0000002e40)=[@rights={0x20, 0x1, 0x1, [r1, r0, r2, r0]}, @rights={0x28, 0x1, 0x1, [r1, r2, r2, r1, r0]}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x30, 0x1, 0x1, [r0, r0, r2, r1, r0, r0, r2, r0]}], 0x90, 0x20000000}, 0x800) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="366543d219410f01cfc443f963cc000f20c035100000000f22c0c461f950dfc74424005b000000c744240200a00000c7442406000000000f011c240fae810f000000c441116658d9b93e0b0000b8d1160000ba000000000f3066b846000f00d8", 0x60}], 0x1, 0x11, &(0x7f0000000240)=[@cstype3={0x5, 0xb}, @cstype0={0x4, 0xc}], 0x2) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4000000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000003, 0x0) 06:16:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4800000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:45 executing program 5: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x1ff}) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xadf, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x4c00000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1267.711841][T19417] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:46 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000003, 0x0) 06:16:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000000c0)={0x6, 0x1, 0x0, 0xba, &(0x7f0000000200)=""/186, 0x1000, &(0x7f00000002c0)=""/4096, 0xb2, &(0x7f00000012c0)=""/178}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'syzkaller0\x00', 0x3ff}) 06:16:46 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) [ 1268.213171][T19446] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6600000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6800000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1268.933126][T19446] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000003, 0x0) 06:16:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x6c00000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x7400000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a00000000000000000500000004009803003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163436573737b79212e76626f78b60000000000000074656d000000"], 0x54}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x1, @default, @netrom={'nr', 0x0}, 0x6, 'syz1\x00', @default, 0x9b9, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 06:16:47 executing program 0: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000003, 0x0) 06:16:48 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1269.794143][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 06:16:48 executing program 0: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000003, 0x0) [ 1269.897948][T19497] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 06:16:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e4274312e706f7369785f61636c5f6163636573737b7921bb7012dbee2da8d2302d73797374656d00000000"], 0x54}}, 0x0) 06:16:48 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x7a00000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:48 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xae01000000000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:48 executing program 0: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x20000000003, 0x0) 06:16:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d656e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797d74656d00000000"], 0x54}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x10000, {{0x2, 0x4e23, @multicast1}}}, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='a5\x91ogroup\x00') [ 1270.547330][T19542] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:48 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0xffffffff00000000, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1271.161821][T19544] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:49 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:49 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:49 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x900) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) [ 1271.390685][T19578] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) [ 1271.492013][T19578] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:50 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:50 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:50 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:50 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:50 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) clock_adjtime(0x0, &(0x7f0000000240)={0xac13, 0x0, 0xb00000000000000}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000180)=""/4096, &(0x7f0000000100)=0x1000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1272.747426][T19629] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1272.792373][T19634] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbeca}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0xaff, 0xfffffffffffffffe}, {0x6, 0xfff}]}, 0x14, 0x1) 06:16:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:51 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xfffffffffffefffe) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 06:16:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:51 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:51 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = fcntl$dupfd(r0, 0x4000000000002, r0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x4, 0x7, 0x5}}, 0x30) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0xffffffffffffffbd, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) syslog(0x2, 0x0, 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}}) 06:16:51 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:16:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x2c}}, 0x0) 06:16:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:16:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x5437, 0x0) [ 1274.025379][T19692] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:52 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1274.580274][T19692] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:53 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:53 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x9) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000100)) 06:16:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x5437, 0x0) [ 1275.219117][T19732] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1275.282289][T19732] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:53 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:54 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:54 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:54 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffffffffffba, &(0x7f0000000040)={&(0x7f0000000080)={0xffffffffffffff3a, 0x20, 0xaff, 0x1000000000000, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x2) 06:16:55 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:55 executing program 1: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}}, 0x40000) 06:16:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x5437, 0x0) 06:16:55 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1276.848775][T19790] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:55 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) [ 1277.193500][T19790] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:55 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:55 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000700)={0x1, {{0xa, 0x4e20, 0xfffffffffffffff8, @rand_addr="4909de50748cd75bfc9bb1d902a3df00", 0x1000}}, 0x1, 0x8, [{{0xa, 0x4e24, 0x8c, @ipv4={[], [], @multicast1}, 0x7fffffff}}, {{0xa, 0x4e23, 0x4, @rand_addr="27e2986a1f4a942a2cac00a954096502", 0x3f}}, {{0xa, 0x4e22, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e20, 0xf, @empty, 0x1000}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, {{0xa, 0x4e20, 0x10000, @empty, 0x4}}, {{0xa, 0x4e21, 0xff, @rand_addr="816297d2e68802f4e1f9d4ac7ef2f488", 0x9}}, {{0xa, 0x4e21, 0x6, @remote, 0x7f}}]}, 0x490) fstat(0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e20, 0x100000001, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3ff}, @in6={0xa, 0x4e20, 0xcc, @dev={0xfe, 0x80, [], 0x1e}, 0x80}, @in={0x2, 0x4e20, @loopback}], 0x48) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f00000005c0)=[{&(0x7f0000000180)="1e54d6109d6cacc3c7117cd12757507faca16f35345172cda4cf958b2ae9741cad8b555010eaaecdd0296e487c9883c3843ba257ab265c2175398e4ddb72c1f7c9e25af863b89311d5ccc8996bfd57ea1370049f8c64c7b1fdb2a47875619fba4924b73ae71538367a98fb3d8c8c7b5e5b6c729cd10e8a293b2f09ca3048df855f4b699e42fa0e3e90453f7c5b24455ef58649626d447321686213c7809215ea75b62653747b02e25581e281255d8a37f5e073ed0a41cd3ce6edc7f1d7910a3842b05f49fe83b925a11aa530820e62b49ac9935030f9ce2d45dd954756f8d4d685a262894d88d9d6aa51f9a155fc9d95", 0xf0, 0x9}, {&(0x7f0000000280)="e1b366c5a45bd204dcbb7b40d2ea2ce8c7f31cbef38fdc32e8097f59c469862448802e9076", 0x25, 0x80}, {&(0x7f00000002c0)="33f76fac9b555fc87b938a2a717bb8888a48a4038a7454c90ae0a30aee44ea5bbeb3f4ac06b2a292b5c063867eb73800c34f1559bb1aaef76c090a1685bf99b7f1df259fd6862f016235015729b2c8b90288e87396de6546c75db705b005448827a37a1b0074270bd1e4d4935adb9eaedc3c2e32f82aa836dafa78c780eaf681448b0463b19a40ea38041384fc", 0x8d, 0x9}, {&(0x7f0000000380)="0c38a8a74e40604e193d9e02c8a3a92fe964a1dbddd3e0d721adaad980167bb6d056ed075023aa8831faa309dd7dd591d6495eb88a62ed5165b8bd5321eac3a09f26ed2bc6efc79c1ab097e69e6eb54c22214e6106cbe237421b84d60c2058066a95dfb6fd0fc91a12a2a6866278dc524c05a08e60f4d83d4c26c03007a522923605fffd1b8cc0022784fafb7649f4d8771cb153a023622ecad70dbbb1b8281b7a86ebde3aa5deb75d8f54a5ad861626d58d41", 0xb3, 0x7}], 0x102010, &(0x7f0000000540)={[{@jqfmt_vfsold='jqfmt=vfsold'}, {@user_xattr='user_xattr'}], [{@hash='hash'}, {@uid_eq={'uid', 0x3d, r1}}, {@euid_gt={'euid>', r2}}]}) r4 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="54000000200000040003003c00010026da696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d000000003e5741ed11fafa9196a6c4ad455f78af7c1449f588b707290f25be63c9c1ef4fa0f1ba19f6f0aeb759a289f24d373b37ef1c71fdcad7af4ac53523ad9cccc1b50ead8cf1dfd938b494eabb62332b41bfefa5e8bfa6c0f64db1124cae1931d19368"], 0x54}}, 0x0) 06:16:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106, 0x3}}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="544000002000ff0a000000000000003c000100406d696d655f747902db57946e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e0000ae388b5430ae531eb9f310ec2f8245125019ac40b992eb24d3235ea2fc3869c0e28812f54119358dcddeba1a3c3e5996f7cfb49d97f54b9c9b63f1536c0eb4f35b97745c364339e57858ef30e64d58c4cbe0e07baced172af50c6ff439e9af0262c73103011b"], 0x54}}, 0x0) 06:16:56 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:56 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:56 executing program 5: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0x3fff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:16:56 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:56 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x4040) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x80000, 0x0) setxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02f2bc2af200f810c1848f02d800000000000086680d4303ff8d2fd5b2c5b8c5ad252570ad70eff92b94369097b5e1b84030cd5aa5c6f06d6d8090a2156adbce44c8b48082e3c1ba4a722a48ed431f8a98b377d64f3c5855d24c0f004f09464a07ca034a500fa7b4b2a499e67f4f49ee0308c8ee1d6472820e94b97dfcb5e0e999d396161245389df6ffffffffb1b1223dcfcdb6051d9ad85d1ad6c30285e61e1db2a114000000000000000000"], 0x1, 0x1) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000180)=0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440), 0x10) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000340)) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000eaff02003c000100406d696d655f7479706576fe4490d2a93d9ae07369785f61636c6163786e6574302d73797374656d000000000000000000000000000000"], 0x54}}, 0x0) 06:16:56 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005007833924d72288eda664d0000040003003c000100406d696d655f74797065766d6e65746c5f6163636573737b79212e7662aa79e73f74302d"], 0x54}}, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000100), &(0x7f0000000180)) setgid(r1) 06:16:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1278.904532][T19890] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 06:16:57 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1278.989008][T19890] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 06:16:57 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e4574312e706f7369385f61636c5f6163636573737b79212e76626f6574302d73797374656d000000000000"], 0x54}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x401, @dev={0xfe, 0x80, [], 0x1a}, 0x400}}, 0xd3a3, 0x1f, 0x8, 0x4977, 0x8}, &(0x7f0000000280)=0x98) 06:16:57 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:57 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1279.603286][T19916] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1280.193233][T19916] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:58 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:59 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:16:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x20, 0xaff, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 06:16:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:16:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000100)={0xfffffffffffffffa, 0x0, 0x3017, 0x6, 0x200, {0x23}}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797009000000000000002df03a236e6574312e706f736978212e76626f786e6574302d73000133a74fba156c27597b010000e0c900000000000090aff156ee02ed583ddf51cd40e6601346d1c4fb0ca44a9d3abd81db803b0b9955f18a7070767af03717"], 0x54}}, 0x0) 06:16:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1281.139796][T19976] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:59 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:16:59 executing program 5: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @rose}, [@bcast, @null, @remote, @remote, @null, @netrom, @rose, @default]}, &(0x7f0000000000)=0x48, 0x80800) fadvise64(r0, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x41) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000280)={0x4, 0x8, 0xfa00, {r2, 0x101}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) semget$private(0x0, 0x0, 0x200) r4 = semget$private(0x0, 0x0, 0x210) semctl$IPC_INFO(r4, 0x0, 0x3, &(0x7f00000002c0)=""/52) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) [ 1281.646249][T19990] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:16:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:16:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1282.254058][T19990] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:00 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:00 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) write$capi20_data(r1, &(0x7f0000000180)={{0x10, 0x3, 0x80, 0x83, 0x7, 0x260}, 0x1000, "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"}, 0x1012) 06:17:00 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1282.484689][T20009] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:00 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:01 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1283.112635][T20009] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) 06:17:01 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x1, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000300)='./file0\x00') prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000240)) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x20, 0x301) getsockname$netrom(r2, &(0x7f0000000180)={{0x3, @netrom}, [@null, @bcast, @default, @null, @rose, @bcast, @netrom, @netrom]}, &(0x7f0000000200)=0x48) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'eql\x00', {0x2, 0x4e22, @local}}) [ 1283.454301][T20050] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:01 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) [ 1283.802139][T20051] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:02 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:02 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x80000000000002) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x101, 0x4040) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x2, 0x328, [0x0, 0x20000180, 0x200002f8, 0x20000328], 0x0, &(0x7f0000000100), &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x9, 0x1, 0x9, 'bond_slave_1\x00', 'veth0_to_bond\x00', 'bcsf0\x00', 'syzkaller1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0xff], 0xa0, 0x118, 0x148, [@connlabel={'connlabel\x00', 0x8, {{0x5, 0x3}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"6e53712df250232a740016fcb5c366db261debf1407444c9b79f9f23b6ff"}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xb, 0x8, 0x9100, 'rose0\x00', 'batadv0\x00', 'hwsim0\x00', 'eql\x00', @random="e76751a53013", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x70, 0xd0, 0x120}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x5, 0x9}}}}]}]}, 0x3a0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x24, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000001c0)={0xa00001, 0x0, [], @string=0x0}}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) ioctl$SIOCRSGL2CALL(r2, 0x89e5, &(0x7f0000000180)=@rose) 06:17:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1284.428904][T20085] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:02 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1284.762920][T20090] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:03 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:03 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4140, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x40000, 0x0) dup2(r0, r1) socket$netlink(0x10, 0x3, 0x12) 06:17:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000100)) 06:17:03 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1285.518401][T20128] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:03 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:03 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6600000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:04 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:04 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1286.448752][T20132] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:05 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:05 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:05 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40380, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100)=0x1, 0x13) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000020040000000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d00000000"], 0x54}}, 0x0) 06:17:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000180)="8834dfa910215743da101325ed83", 0xe, 0x8}, {&(0x7f00000001c0)="1456d29512e83f2e85a7aaf0d6ab696ce42ead0304466666a8336b95cffd0fe7bc83a5e12552c00db924e5c0f7e02bbc0d128679375c4f7566173c8ee39d804723d49f1c40f0f6397f13fedf8b40dc9b4352e500b701a3fa429837acfa0a7827e397d4a502ef9ee9e6525bbf2f5fd1dc94d6e72dff54552a97c384b6928d97c6247dbb904a29a733c8c333cf7f9107d3841be1028afc6fdfa504e0ae293839e6e6f8273490776626cb812f0814883d1494905513d77ee10a871b74c12f96c311db28", 0xc2, 0x10000}, {&(0x7f00000002c0)="97d9f62e58ee107caeaa8ef1596972ac0b3fb6ac71b8289b056b74713b21cd934a983931f0717ca9ed9005758a928219b340c82a8090487199783411009578deafb92e1513a73316", 0x48, 0x8000000000}, {&(0x7f0000000340)="8309b05f7b5f8be21e64d2a66e04e7ae3d104f78ca47e9a1c649f7f030af2713a359c81e3f325fda8b979804a8c6b3707ef8eec2df2b635a6005b42c460211487cfd0f619d513d971ecee1334b330eb68077474b4e225ef93c917b406eef9e737e63e0e06506daf8bf992feb02f4b0425c2d0fcbc0a9893d3a7d2cea76e106f92e2127c8ecc519d5223d7c45d854585faf73a2fb9832930e5d3ce8fe1a006be6956d290823a55e15ff8dfab3a587d1ab30d60613a301dbc0b53345f04ddca238dc11125cbe", 0xc5, 0x9}], 0x8030, &(0x7f0000000580)={[{@errors_ro_remount='errors=ro-remount'}, {@hash_r5='hash=r5'}, {@tails_on='tails=on'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@noacl='noacl'}, {@resize_auto='resize=auto'}], [{@smackfsdef={'smackfsdef', 0x3d, 'vmnet0\'wlan0,'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@pcr={'pcr', 0x3d, 0x39}}, {@euid_eq={'euid', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@hash='hash'}, {@dont_measure='dont_measure'}]}) [ 1287.248076][T20190] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1287.649617][T20190] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:05 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:06 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f03000000000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) [ 1288.516888][T20226] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:06 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) [ 1288.944034][T20226] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:07 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065806d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d00000000"], 0x54}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x280000, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000100)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}) 06:17:07 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1289.216547][T20256] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1289.610453][T20256] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:07 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:07 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:07 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f614e300e376421249c737b79212e76626f786e6574300500797374656d00000000"], 0x54}}, 0x0) 06:17:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) [ 1289.923895][T20278] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e7c6f7369785f61636c5f6163636573737b79212e76626f786e6574302d7379cced656d00000000"], 0x54}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000180)={0x0, 0x8a, "7f02aee700998076b9912bca0222e39472730dc9a3c7bcd065d5b4f2d35ed186930b77a09b2231f8438f44bd49603cc22a43113623fab34097517f69381468715454c2a4ed2b83f37ef778bfcd6daa0b602cf45e494ee1fb8687ecd374fa54978487c46c8724f791ee88a7f08160fb0ac2b477e22b27b43602965e9ec4135061ae5387f5e3e6d363133a"}, &(0x7f0000000100)=0x92) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x7, 0x3467}, &(0x7f0000000300)=0x90) 06:17:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1290.449713][T20294] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1290.927786][T20294] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:09 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:09 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000180)) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xe7d7ea0039f3a778) r1 = geteuid() r2 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff9e, &(0x7f0000000040)={&(0x7f00000025c0)={0xfffffffffffffeb2, 0x20, 0x400000000aff, 0x3, 0x0, {0x6}, [@nested={0x0, 0x72, [@generic="ae7eedc59393b1c34bd692db5e56ce63028316bc989c07e8741e2c13e8533298a644b927f005604ca0fa9d38d503a405e03e3ffd75cd1f7c9ca789a3783a99d4edefe4e0318902f5db56ffff0b6137b2f7ab39ad8cfe603b181e281d44bb0bcf0f1e9b547ad585620426ed6b140966457b3a88dffedbfd39044c05f1992f071505afa11f924c336f", @generic="0e4040f2bd8033efd6f42cbf349ffe5b3ed4b120bb18318ec4c3beaaeb08982a21ac4500fa17f481be93b01f74fad9e1987b2a67e4b454971afd21c455f0a986a99425724c2c209c1958c05810aaaab488f5bd0c50477e7642e6ef"]}, @nested={0x0, 0x8f, [@typed={0x0, 0x6b, @ipv4=@loopback}, @typed={0x0, 0x81, @u32=0x3}, @generic="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", @typed={0x0, 0x7c, @uid=r1}, @generic="a9e9d6b6e6da0c29d84a63fc1fa3c0c21bcefd702c553dd85cf062ea010d1b88bd654b5dab65995aa4e697a5b5d9dd9bcc3088b89dba6ed75c63fdc95d84a1e07de91d1903d4d2cfd5a7c973ccae8535c3a9108f7b0f0e098e3aee9e9ab6ad2e40b3bfefa704f39a1aaec48c9abbf4cfedc5730d30f81295e81dadbc9d4aac086ae687", @generic="b2989e5c3f5c99eadef8b50d4e26b992357eb232abd2267345efbae92edf1c31f2fa91687a50ef740be742cd90a935694c4db57fb130c2ade3cd9c812a4a22aa62354c0a897182d1ee7eadfdb7e9d2b9c84329043c1629934df43b4bc41f1f32ca5674c96e24bad308afe72d546450830ee4fd3101fbab7dbcec17df2061613dfb2f9d117711e56b0d2cc6484e820b49374684e74f5f0bb81eef42214ea9af4fafee3e1220ff0047a323492a9d51f5c400e16d", @typed={0x0, 0x2a, @fd=r0}, @generic="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", @typed={0x0, 0x2d, @ipv4=@empty}]}, @generic="d226793f38ff50551315c832168ace6893eb7a8b", @typed={0x0, 0x1a, @binary="d6c7ffc632821e15ea2d16b618cf7ced1eae83f5e85d90768d7b987b4294a656167817268793c51c8cada83f7de2c656ca487816aea872095cdbb4643639b936f736444e13ec1396746b2912d5"}, @typed={0x0, 0x68, @pid=r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0xc001) 06:17:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0xc8, 0x29, 0xaff, 0x0, 0x0, {0x5}, [@generic="9422702331e67b817bb4d40abdb79e4387b6adfb221c5e68e2f4fdfd912a011e85fffc697fe6dc16ad03bf3ce0736149dca7bf3fb73b52a7a421126864888d8a37e7f4903896e32dd41be6af03524e0eb6b96a7d34d4f288616036ad0f8c65e586de87116aba1f5cfcf702269afae422d1e4b7963898", @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0xc8}}, 0x0) 06:17:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1291.472746][T20330] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.5'. 06:17:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f7479706d766d6e65747b35d14932b63d794c1b9365312e706f738b785f61636c5f6163636573737b79212e76626f786e657478359b300650e564826774f8595008507f2b838458a1f28a3cb6e53d0e83b23a90c2044eb914a5c8f6a0a7b700c593bf50ac159af568711e96c2beab8b5fba1aa3fd2316abb934898d882443b2e29aed4362bf0122f6d8d2ec9d669bbd724581d43ab7fb4196e64e2e99e89e0c6c2a5df6d271ec1fe1f5b5b4e2cd84dc418c442cf59f39b714"], 0x54}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x121481, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) 06:17:10 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) ioctl$int_in(r1, 0x80000080045017, 0x0) r2 = epoll_create1(0x0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x8, 0x0, 0x0, 0x0, 0x13bf, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) r4 = msgget(0x1, 0x40) msgctl$IPC_RMID(r4, 0x0) r5 = dup(r2) write$nbd(r3, &(0x7f0000001200)=ANY=[@ANYBLOB="67446600040000000100010004000000ace7de568f1cad6ff889a7667596afe5dd3bac7c5f16a99451e9160c9bf7acbe6ae278e16dfa71d2aa70bdd1084a08dcefeb1e9c1df1d79412861271e6ae7a3bbc7112513861ef7b78d23a55c0eaf5c977e8df1429ec5f5eae144838a7b65cac2025cc6d746f9881e06f1040049eb9a222017692f8c73915bff4d3c4b1e8af76ad769cab23c23200000000000000"], 0x1) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r6, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@int=0x9480, 0x4) write$UHID_CREATE(r1, &(0x7f00000010c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/4096, 0x1000, 0x6, 0x4, 0x400, 0x5, 0x8}, 0x120) ioctl$TIOCNXCL(r5, 0x540d) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000000001000000e0002e01000000"], 0x14) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 06:17:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) socketpair(0x5, 0x806, 0x674d, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000002c0)={0x0, 0x8, 0x2, 0x683}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x501401, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x5}}, 0x101, 0x5, 0x2, 0xcb, 0x8}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={r3, 0x800, 0x40, "3ef5eba86466a79776650690db0163ae38ea5869f1cf61687ad199d0808541fd793ff3291366bc3dc73ec972b84b17aefea1c9c9d1de0fe17a64c022f4baa6d5"}, 0x48) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x5, 0x7, 0x1, 0x0, 0x8}) sendto$unix(r1, &(0x7f0000000100)="3cc023d58b4b5b14703e4f35ba957c3c2a6fdbd7b81217fd0f40aac866fa8699", 0x20, 0x40000, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) [ 1291.945975][T20347] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1292.336870][T20347] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:10 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:10 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:10 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00P\x0e\x00\x11', 0xff}) 06:17:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) connect$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x9, 0x6, @remote}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:10 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1292.849837][T20376] validate_nla: 1 callbacks suppressed [ 1292.849848][T20376] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) fcntl$setown(r0, 0x8, r1) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @nested={0x0, 0x34, [@typed={0x0, 0x6c, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}, @generic="b32e3bc0bc1a2911ef1c799a8cfb78d743a1555d30c02931bea5dacab3c1b5df0c533c13cd61b0c7905bbeb4f3ee21034d23d60034220d64ab60a849f99a3fa261fbd2a89ccb41333c0eb0815dd5ec85edce3b95d640c06d12f81db7230d16cdfe856aea8be21b7a0723c30dd8c6c194c4f00db95b6f7c014d40bafe729ce31cc397d8792642888e174fe848329cb7ab9c17dcae3376f216febb822399bf"]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000000c0)="34873e63ddd698530c0be3ea0c7ad7e10bb71c4456dbd5377c8e426f10d8c80e7d4cb55bec35e739154751b94c386b422ea8344846931abc321dd4d0b8f1215bbbda575264dd563d00f9623956a4c6a14483d2c2d7885a6a8e8dd1b6a24bbf2f14a7b3f95a684a0b036c534dc4b8c95008f6c03afe090be883d46cc5f789089ee3148a02d8ebc07151c9af67e4ab6c39df04f73cf1c2149a334d5fb49e18991595b636f45386", 0xfffffece) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="7ba979c3984811fec31f294b5e29f05f7d2f4fbf93357fd2100a5d25306b79d90da1df2c92861a731b4b182911b28c0298830cda3638ae892070b841aa7f000000804efe48ca59d7345d5bdae5a1f398836ca3a227fc179f62cf51864bd6131fe1941fd3f6e5b60e26ede57b300c39e2b7d8eff8b0767ee0f08e0ea9e667aa9f882faec1ec4e8f9b4071a602cc0f408a2bbddc65e4ad68f652958e0acf1e1439a07b47bdc68493c96ad071bd02b2635f863e077b7348216dec4594db1df5601889"], &(0x7f00000001c0)=0xc1) getsockname$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000340)=0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={r3, 0x10000}, 0x8) 06:17:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) ioctl$int_in(r1, 0x80000080045017, 0x0) r2 = epoll_create1(0x0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x8, 0x0, 0x0, 0x0, 0x13bf, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) r4 = msgget(0x1, 0x40) msgctl$IPC_RMID(r4, 0x0) r5 = dup(r2) write$nbd(r3, &(0x7f0000001200)=ANY=[@ANYBLOB="67446600040000000100010004000000ace7de568f1cad6ff889a7667596afe5dd3bac7c5f16a99451e9160c9bf7acbe6ae278e16dfa71d2aa70bdd1084a08dcefeb1e9c1df1d79412861271e6ae7a3bbc7112513861ef7b78d23a55c0eaf5c977e8df1429ec5f5eae144838a7b65cac2025cc6d746f9881e06f1040049eb9a222017692f8c73915bff4d3c4b1e8af76ad769cab23c23200000000000000"], 0x1) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r6, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@int=0x9480, 0x4) write$UHID_CREATE(r1, &(0x7f00000010c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/4096, 0x1000, 0x6, 0x4, 0x400, 0x5, 0x8}, 0x120) ioctl$TIOCNXCL(r5, 0x540d) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000000001000000e0002e01000000"], 0x14) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) [ 1293.034792][T20392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1293.115530][T20392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:17:11 executing program 5: r0 = epoll_create(0x101) fsetxattr(r0, &(0x7f0000000180)=@random={'system.', '@security]\x00'}, &(0x7f00000001c0)='^\x00', 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000100)={0x2e}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000021f500040003003c000100406d696d6e6574312e706f7369785f61636c6163636573737b79212e76626f786e6574302d73797374656d0000000000"], 0x54}}, 0x0) 06:17:11 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xe, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1293.310120][T20404] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 06:17:11 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9b, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:11 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b0") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:11 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9c, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x1, 0x0) ioctl$int_in(r1, 0x80000080045017, 0x0) r2 = epoll_create1(0x0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x4) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000440)={&(0x7f0000000240), 0x0, 0x8, 0x0, 0x0, 0x0, 0x13bf, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "2ca5efa3aba691d6e07bbc10ba6d0c5b6b40bbf95a5d2f9d892c7a4320755ebc"}}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) fallocate(r3, 0x0, 0x0, 0xa6ba0) r4 = msgget(0x1, 0x40) msgctl$IPC_RMID(r4, 0x0) r5 = dup(r2) write$nbd(r3, &(0x7f0000001200)=ANY=[@ANYBLOB="67446600040000000100010004000000ace7de568f1cad6ff889a7667596afe5dd3bac7c5f16a99451e9160c9bf7acbe6ae278e16dfa71d2aa70bdd1084a08dcefeb1e9c1df1d79412861271e6ae7a3bbc7112513861ef7b78d23a55c0eaf5c977e8df1429ec5f5eae144838a7b65cac2025cc6d746f9881e06f1040049eb9a222017692f8c73915bff4d3c4b1e8af76ad769cab23c23200000000000000"], 0x1) ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f0000000200)) io_setup(0x40000100000003, &(0x7f0000000340)=0x0) io_submit(r6, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a70c0300, 0x0, 0x8, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@int=0x9480, 0x4) write$UHID_CREATE(r1, &(0x7f00000010c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/4096, 0x1000, 0x6, 0x4, 0x400, 0x5, 0x8}, 0x120) ioctl$TIOCNXCL(r5, 0x540d) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0000000001000000e0002e01000000"], 0x14) socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) 06:17:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000002000ff0a000800008000000005000000040003003c000100406d696d655f7479706589f3e6223389edef6f7369785f61636c5f6163636573737b79212e76626f786e6574302d7379737465d4d6f626008a2c6d048abcd75f7d08a7028ce6956a2ecb5ab7ab93db91994e3bad22bd98f9f3f33dc26e18cd47c973287bd75f0a63e1f519f3c915feb88157e2d83f20182b6b30e75652b7ac8b38cb5a02c70c278aefacdc1b57d86899b005b582765a4c42d2a6ceeec67682"], 0x54}}, 0x0) 06:17:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:12 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9d, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1293.978824][T20436] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:12 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:17:12 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9e, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:13 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9f, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$NBD_CLEAR_QUE(r0, 0xab05) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000180)={0x0, {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x1000000) 06:17:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0x240) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000540)={0x6, 0xd87}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xe0, 0x0, 0xe0, 0xe0, 0xe0, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, &(0x7f0000000100), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xffffffff, 0xffffff00, 'sit0\x00', 'yam0\x00', {0xff}, {}, 0x16, 0x2, 0x2}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x20, 0x20}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x48ce87cc, 0x3f}, {0xffffffffffff376d, 0x0, 0x5}, {0x0, 0x4}, 0x4}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) getsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000480), &(0x7f00000004c0)=0x4) 06:17:13 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00T\x02\x00\x11', 0xff}) [ 1295.037061][T20467] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1295.071133][T20467] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x16) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:13 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x102, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1a080001}, 0xffdc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1080, 0x35, 0x300, 0x70bd29, 0x25dfdbff, {0x1f}, [@nested={0x106c, 0x91, [@generic="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", @generic="e1def2bbbde85cecb1302da852708b1dfaf7768b03b29eb86a166354be3775c9628bc1db74c91f473140baf498f0ab2741b8d0640c47b02766e52e5a2f1c1f840ee7a912da654583d23cf8ae5577331182283a38773e0673623913656b68e13bd66a0b0120"]}]}, 0x1080}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000001300)={0x81, 0x9, 0x0, 0x4, 0xffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000100)={0x3800, 0x7, 0x4c08, 0x3, 0xed}) 06:17:13 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:17:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9f, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:13 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x10a, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1295.504083][T20491] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:14 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x148, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1296.131471][T20497] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:14 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x14c, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:14 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xd) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0xa20004, 0x46, 0x2, [], &(0x7f0000000180)={0xa20933, 0x1, [], @string=&(0x7f0000000100)=0x4b}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x700, 0x6, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x44881) 06:17:14 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00T\x02\x00\x11', 0xff}) 06:17:14 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae010000], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:14 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:17:14 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x166, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000100)={0x82ff}) 06:17:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2) delete_module(&(0x7f0000000040)='/dev/ptmx\x00', 0x800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000300)={0x6, {{0xa, 0x4e21, 0x6, @rand_addr="852326aad4682b2f6f8f7454dfacded7"}}, {{0xa, 0x4e22, 0x80000000, @local}}}, 0x108) write$binfmt_elf32(r0, 0x0, 0x0) [ 1296.806408][T20541] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2) delete_module(&(0x7f0000000040)='/dev/ptmx\x00', 0x800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000300)={0x6, {{0xa, 0x4e21, 0x6, @rand_addr="852326aad4682b2f6f8f7454dfacded7"}}, {{0xa, 0x4e22, 0x80000000, @local}}}, 0x108) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x168, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2) delete_module(&(0x7f0000000040)='/dev/ptmx\x00', 0x800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000300)={0x6, {{0xa, 0x4e21, 0x6, @rand_addr="852326aad4682b2f6f8f7454dfacded7"}}, {{0xa, 0x4e22, 0x80000000, @local}}}, 0x108) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:15 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x16c, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1297.508028][T20541] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:15 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2) delete_module(&(0x7f0000000040)='/dev/ptmx\x00', 0x800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f0000000300)={0x6, {{0xa, 0x4e21, 0x6, @rand_addr="852326aad4682b2f6f8f7454dfacded7"}}, {{0xa, 0x4e22, 0x80000000, @local}}}, 0x108) 06:17:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000040)="61e097a9e8211ecf03c338fec3bdabe19f7cd75712531d2f173dd29abfb8fc8201f97e91ba81b3e837151588115f85ae0088caca6fe3d5a17adda5dfcc2e16a3a786be3d6f76240739890202cd5c5e435f94c658109fc749c633429c332a55e75e0ec22ee5894f923d82057915c68bd4a1ce158934815957550dc1a75731a98b682ce92279054e7ee1fac8d0cf338d30c0647a40da9357bde91a68d67eedc6e43c957d67e6097e28f695057910c83d70e4adc257c90d70513fa8d397dea9a477cfab", 0xc2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x5, 0xffffffffb42ad5b8, 0x9}) 06:17:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x174, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:15 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x7, 0xa203) r1 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0xff, 0x4600) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000500)={r1, 0xffffffffffffff55, 0xc9e, "46d5f666ad343909e9"}) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) [ 1297.808563][T20583] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1297.848060][T20585] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000040)="61e097a9e8211ecf03c338fec3bdabe19f7cd75712531d2f173dd29abfb8fc8201f97e91ba81b3e837151588115f85ae0088caca6fe3d5a17adda5dfcc2e16a3a786be3d6f76240739890202cd5c5e435f94c658109fc749c633429c332a55e75e0ec22ee5894f923d82057915c68bd4a1ce158934815957550dc1a75731a98b682ce92279054e7ee1fac8d0cf338d30c0647a40da9357bde91a68d67eedc6e43c957d67e6097e28f695057910c83d70e4adc257c90d70513fa8d397dea9a477cfab", 0xc2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x5, 0xffffffffb42ad5b8, 0x9}) 06:17:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2) delete_module(&(0x7f0000000040)='/dev/ptmx\x00', 0x800) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) 06:17:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x17a, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000040)="61e097a9e8211ecf03c338fec3bdabe19f7cd75712531d2f173dd29abfb8fc8201f97e91ba81b3e837151588115f85ae0088caca6fe3d5a17adda5dfcc2e16a3a786be3d6f76240739890202cd5c5e435f94c658109fc749c633429c332a55e75e0ec22ee5894f923d82057915c68bd4a1ce158934815957550dc1a75731a98b682ce92279054e7ee1fac8d0cf338d30c0647a40da9357bde91a68d67eedc6e43c957d67e6097e28f695057910c83d70e4adc257c90d70513fa8d397dea9a477cfab", 0xc2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000140)={0x5, 0xffffffffb42ad5b8, 0x9}) 06:17:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2) delete_module(&(0x7f0000000040)='/dev/ptmx\x00', 0x800) 06:17:16 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x2) 06:17:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000040)="61e097a9e8211ecf03c338fec3bdabe19f7cd75712531d2f173dd29abfb8fc8201f97e91ba81b3e837151588115f85ae0088caca6fe3d5a17adda5dfcc2e16a3a786be3d6f76240739890202cd5c5e435f94c658109fc749c633429c332a55e75e0ec22ee5894f923d82057915c68bd4a1ce158934815957550dc1a75731a98b682ce92279054e7ee1fac8d0cf338d30c0647a40da9357bde91a68d67eedc6e43c957d67e6097e28f695057910c83d70e4adc257c90d70513fa8d397dea9a477cfab", 0xc2) 06:17:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(0x0, 0x4008008080001) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000007c0)={{{@in=@multicast1, @in6=@dev}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') fdatasync(r0) syz_open_dev$loop(0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8e, 0x3001) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0xfd6f) sendfile(r1, r2, 0x0, 0x80000000000b) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100)) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:16 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x27a, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:16 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) [ 1298.802448][T20630] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:17 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:17 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1299.088177][T20630] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:17 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:17 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:17 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:17 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x300, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:17 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x4c, 0x1, 0x2}, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xdd~w\xa7\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x19K\xdc\"b\xf5\x8aY\\P\xf2\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x16\xf953\xd6\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x600, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:18 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) [ 1299.941527][T20684] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:18 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:18 executing program 1: r0 = syz_open_dev$vivid(0x0, 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:18 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:18 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 06:17:18 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1300.600942][T20703] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[]}}, 0x40080) r1 = syz_init_net_socket$ax25(0x3, 0x7, 0xcf) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="0ddbbdae9636cbd4345c1a2d034c42017481f0dd978f0e9398c59376e44a16ddcb6677ed65bfd68f431fc5f774f71a455bf57d", 0x33}], 0x1) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) 06:17:18 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:18 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x1400, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:18 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 06:17:18 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x2800) name_to_handle_at(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[], &(0x7f0000000280), 0x1000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2840009}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x8c, r1, 0x101, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe84c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ce}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x6}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40885}, 0x800) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r3, 0x301, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x1000]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x8, 0x6dbf, 0x2, 0xfcb]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:19 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) [ 1301.133547][T20741] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1301.528824][T20748] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:20 executing program 1: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:20 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x2000, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x5ca769a6e64fce31) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000740)=0xb9) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x509400, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000180)=""/184) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000009000000ff067600a2e280d487d1073adf5524c9a4254b6be662454657031cd3d4717ec4e81011277a52c96d191ddc83e8d2a757c648eb096595e7aebb94b7c7fc338154fad7165324cedb5dc544feee1461f8302b7a6d2d0f2c8d6f77fe30e89847aadb59202e25e1bf3ceb02ad69d6af0c11ed608bdcac3c38a1d095ee7c4a4fcf32575df5403ff652884ad5ac53291e634c9969403bf39d64eac8d844f14100b416e5a6d7699950074e49a297e5db26a85b90de4aa16a4533a3e1dc98d1acb417f72d105f7a4d2570eb38d76ea161d1a72f8440cd18a7d9562aed60181135398b5561d1f0c31e3d4ab98e45eb73f3acad25"], 0x82) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3af1dd43c0df0822000000000000000005000000040003003c000100406d6995e42a6d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d00000000"], 0x54}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r2}) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000013) getgroups(0xa, &(0x7f00000004c0)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="020000000100040000000000040004000000000008000400", @ANYRES32=r3, @ANYBLOB="f33c357f08000000", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="1000028e1da99cbfab0862a800000000"], 0x44, 0x0) 06:17:20 executing program 1: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:20 executing program 1: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:20 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 06:17:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:22 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:22 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 06:17:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:22 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:22 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x3f00, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d00000000a72ef548992d630079d420e4082a23c68b059bc0ab62dc7ef8b9646fa7788c1162331d812dde10d19558012f204c11763cee9ea10b81f2b31460609e582088bf76cf1de04ae602d2fc46188296b2c894631a1690090000008747a6ee6377668b9ce47bdf98589966996c840878b4b43145c536998ec275e55308c0785afc7dc2613e494154d81b598d500c1031b4541fe22afc59c81eaa7526011dd6"], 0x54}}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000180)="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", 0x1000) [ 1304.327006][T20799] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1304.353746][T20799] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000100)='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00', 0x35, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000180)) [ 1304.457096][T20811] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:22 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, 0x0) 06:17:22 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:23 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:27 executing program 1: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:27 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x4000, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1308.925248][T20814] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x800, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001800)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000001900)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001940)={@local, r2}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80141, 0x0) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000100), &(0x7f0000000180)=0x4) 06:17:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:27 executing program 1: [ 1309.121105][T20852] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:27 executing program 1: 06:17:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:27 executing program 1: 06:17:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:31 executing program 1: 06:17:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:31 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) [ 1313.055905][T20852] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:31 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x7a02, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', r1}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) 06:17:31 executing program 1: 06:17:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) write$binfmt_elf32(r0, 0x0, 0x0) 06:17:31 executing program 1: [ 1313.343887][T20893] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 06:17:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 06:17:31 executing program 1: 06:17:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 06:17:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x1b, 0x8, 0x70bd26, 0x25dfdbfc, {0x10}, [@typed={0x18, 0x92, @str='cgrouptrustedproc\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x80) 06:17:41 executing program 1: 06:17:41 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:41 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x8100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:41 executing program 1: 06:17:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000002000ff0a000000000000000005000000040003003c000100406d696d655f74797065766d6e6574312e706f7369785f61636c5f6163636573737b79212e76626f786e6574302d73797374656d00000000b19db2d55065bab5802da1b5dfbf248395320d5885081b05fcabe85607e9128850be38b71afd97f2f400b09262807f6e2bea63d1"], 0x54}}, 0x0) 06:17:41 executing program 3: 06:17:41 executing program 1: 06:17:42 executing program 3: 06:17:42 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x40100) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x20, 0xaff, 0x0, 0x0, {0x5}, [@typed={0x4, 0x3}, @typed={0x3c, 0x1, @str='@mime_typevmnet1.posix_acl_access{y!.vboxnet0-system\x00'}]}, 0x54}}, 0x0) [ 1324.103822][T20947] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:17:49 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:17:49 executing program 1: syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x4c, 0x1, 0x2}, 0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\x10\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f\xf3\xc8\xdd~w\xa7\xbdZ\xe5\xa7\xda\xeb\x03\x98\xfe\xd9,\xa6\'\xb6q\x19K\xdc\"b\xf5\x8aY\\P\xf2\xdb\xdc~\xf1}K\x9d%\x1e\xe7\xe1\x12\xc3x\xa2\x19\xf3}\xfe\x8fW\xf9\x13\x1f$\xea\f3b\x1c\xcf\xcf\xb9\x9a\x8d\xa0CS\n\xfc\t\x8b\xe3EP\xc8\xa9o\xde\xf7\x17\xa95\xb125\xdb\x16\xf953\xd6\x8f\xc2\x03a\x01\xfd\x8b\xad\xea\xb2+\xb3Z0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) [ 1331.269233][T20952] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 06:17:49 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x67665, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:17:49 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:17:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x8) [ 1331.590181][T20970] FAULT_INJECTION: forcing a failure. [ 1331.590181][T20970] name failslab, interval 1, probability 0, space 0, times 0 [ 1331.733118][T20970] CPU: 1 PID: 20970 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190322 #9 [ 1331.742280][T20970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.752540][T20970] Call Trace: [ 1331.755995][T20970] dump_stack+0x172/0x1f0 [ 1331.760405][T20970] should_fail.cold+0xa/0x15 [ 1331.765026][T20970] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1331.770882][T20970] ? ___might_sleep+0x163/0x280 [ 1331.775781][T20970] __should_failslab+0x121/0x190 [ 1331.780748][T20970] should_failslab+0x9/0x14 [ 1331.785275][T20970] kmem_cache_alloc_node_trace+0x270/0x720 [ 1331.791107][T20970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.797466][T20970] ? _parse_integer+0x139/0x190 [ 1331.802345][T20970] __kmalloc_node+0x3d/0x70 [ 1331.806879][T20970] kvmalloc_node+0x68/0x100 [ 1331.811494][T20970] video_usercopy+0x454/0x10d0 [ 1331.816271][T20970] ? v4l_s_fmt+0xab0/0xab0 [ 1331.820695][T20970] ? tomoyo_init_request_info+0x105/0x1d0 [ 1331.826510][T20970] ? v4l_enumstd+0x70/0x70 [ 1331.830933][T20970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.837182][T20970] ? tomoyo_path_number_perm+0x263/0x520 [ 1331.842869][T20970] ? find_held_lock+0x35/0x130 [ 1331.847646][T20970] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1331.853499][T20970] ? video_usercopy+0x10d0/0x10d0 [ 1331.858534][T20970] video_ioctl2+0x2d/0x35 [ 1331.862873][T20970] v4l2_ioctl+0x156/0x1b0 [ 1331.867219][T20970] ? video_devdata+0xa0/0xa0 [ 1331.871837][T20970] do_vfs_ioctl+0xd6e/0x1390 [ 1331.876459][T20970] ? ioctl_preallocate+0x210/0x210 [ 1331.881595][T20970] ? __fget+0x381/0x550 [ 1331.885775][T20970] ? ksys_dup3+0x3e0/0x3e0 [ 1331.890203][T20970] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1331.896552][T20970] ? fput_many+0x12c/0x1a0 [ 1331.900998][T20970] ? tomoyo_file_ioctl+0x23/0x30 [ 1331.906042][T20970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1331.912299][T20970] ? security_file_ioctl+0x93/0xc0 [ 1331.917423][T20970] ksys_ioctl+0xab/0xd0 [ 1331.921594][T20970] __x64_sys_ioctl+0x73/0xb0 [ 1331.926250][T20970] do_syscall_64+0x103/0x610 [ 1331.930873][T20970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1331.936776][T20970] RIP: 0033:0x458209 [ 1331.940677][T20970] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1331.960301][T20970] RSP: 002b:00007fe77da10c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1331.968839][T20970] RAX: ffffffffffffffda RBX: 00007fe77da10c90 RCX: 0000000000458209 [ 1331.976834][T20970] RDX: 00000000200000c0 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 1331.986710][T20970] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1331.994703][T20970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe77da116d4 [ 1332.002689][T20970] R13: 00000000004c3347 R14: 00000000004d5f68 R15: 0000000000000004 06:17:50 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:17:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x80000) 06:18:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x7ffffffff000) 06:18:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x8000000000000) 06:18:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:18:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0xf0ffffff7f0000) 06:18:11 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:18:11 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:18:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:19:52 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:19:52 executing program 3: semget(0x0, 0x0, 0x480) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) signalfd4(r0, &(0x7f0000000040)={0x74f}, 0x8, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:19:52 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:19:52 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:19:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279c, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:19:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x2, 0x0) 06:19:52 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x2, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:19:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0x100000000, 0x1f, 0xdb, 0x8, 0x1, 0x3}, 0x2c) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1}) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000000c0)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)={r3}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000040)) 06:19:52 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x5421, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:19:52 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x5450, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:19:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) dup(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:19:52 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x5451, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:19:52 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x5452, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:19:52 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0xd0, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xac, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @empty, 0x20}, @in6={0xa, 0x4e23, 0x1, @rand_addr="028fb62b3da1be3ae32b8656d077b9aa", 0x8}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0xfffffffffffffff8}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x11, @remote, 0x3b}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xc21}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r1, 0x74, "51eaaee57c85ab1eab91c8ba668a09c1b48f61fa351e532adf24a1630e7d0a4c797e31c10fa28c6243faebe512f0758998c3485670e7b117e7e53a55e6f647e2d15c47b08868e8042a0072cb1ad59d1b350e998ac8f137390d64e777e6fdc8e4b1e330f2e52a6d7d5075328bd8ca108281061f09"}, &(0x7f0000000240)=0x7c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r2, 0x0, 0x0) 06:19:52 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x20000000003, 0x0) 06:19:53 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) [ 1456.129331][T21094] IPVS: ftp: loaded support on port[0] = 21 [ 1456.251670][T21094] chnl_net:caif_netlink_parms(): no params data found [ 1456.342293][T21094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.349652][T21094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.357330][T21094] device bridge_slave_0 entered promiscuous mode [ 1456.364894][T21094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.372570][T21094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.380648][T21094] device bridge_slave_1 entered promiscuous mode [ 1456.461495][T21094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1456.471557][T21094] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1456.488184][T21094] team0: Port device team_slave_0 added [ 1456.498049][ T21] device bridge_slave_1 left promiscuous mode [ 1456.505051][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.562225][ T21] device bridge_slave_0 left promiscuous mode [ 1456.568562][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.624490][ T21] device bridge_slave_1 left promiscuous mode [ 1456.630986][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.676049][ T21] device bridge_slave_0 left promiscuous mode [ 1456.684738][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.377674][ T21] device hsr_slave_1 left promiscuous mode [ 1458.431580][ T21] device hsr_slave_0 left promiscuous mode [ 1458.491983][ T21] team0 (unregistering): Port device team_slave_1 removed [ 1458.504191][ T21] team0 (unregistering): Port device team_slave_0 removed [ 1458.517321][ T21] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1458.551131][ T21] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1458.644263][ T21] bond0 (unregistering): Released all slaves [ 1458.818122][ T21] device hsr_slave_1 left promiscuous mode [ 1458.890471][ T21] device hsr_slave_0 left promiscuous mode [ 1458.949223][ T21] team0 (unregistering): Port device team_slave_1 removed [ 1458.963495][ T21] team0 (unregistering): Port device team_slave_0 removed [ 1458.974843][ T21] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1459.021764][ T21] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1459.106782][ T21] bond0 (unregistering): Released all slaves [ 1459.231210][T21094] team0: Port device team_slave_1 added [ 1459.277055][T21094] device hsr_slave_0 entered promiscuous mode [ 1459.315557][T21094] device hsr_slave_1 entered promiscuous mode [ 1459.369997][T21097] IPVS: ftp: loaded support on port[0] = 21 [ 1459.446909][T21094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1459.486363][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1459.494115][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1459.504536][T21097] chnl_net:caif_netlink_parms(): no params data found [ 1459.519763][T21094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.534589][T14752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1459.543414][T14752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1459.551839][T14752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.558944][T14752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1459.579683][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1459.600365][T16638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1459.609233][T16638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1459.617919][T16638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.624951][T16638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.635331][T21097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.642409][T21097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.653859][T21097] device bridge_slave_0 entered promiscuous mode [ 1459.667072][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1459.675787][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1459.684237][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1459.693180][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1459.701799][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1459.713809][T21097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.720962][T21097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.729302][T21097] device bridge_slave_1 entered promiscuous mode [ 1459.744001][T14752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1459.754398][T14752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1459.773395][T21094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1459.784187][T21094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1459.796678][T14752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1459.805082][T14752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1459.813597][T14752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1459.822887][T21097] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1459.842179][T21097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1459.865953][T21097] team0: Port device team_slave_0 added [ 1459.872956][T21094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.888490][T21097] team0: Port device team_slave_1 added [ 1459.938564][T21097] device hsr_slave_0 entered promiscuous mode [ 1459.995801][T21097] device hsr_slave_1 entered promiscuous mode [ 1460.090634][T21097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.097790][T21097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1460.105244][T21097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.112370][T21097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1460.285916][T16638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.300961][T16638] bridge0: port 2(bridge_slave_1) entered disabled state 06:19:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x80000, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1460.353648][T21097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1460.390170][T21097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1460.400814][T16638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1460.423750][T16638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1460.508318][T21097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1460.525400][T21097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1460.573394][T21097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.003692][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1464.023405][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1464.036623][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.043701][ T7830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.057597][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1464.066666][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1464.075114][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.082275][ T7830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.090488][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1464.099417][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1464.108920][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1464.118099][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1464.127849][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1464.137059][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1464.150753][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1464.160547][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1464.177255][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1464.192900][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1464.215923][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1464.223938][ T7830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 06:20:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5409, 0x0) 06:20:02 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x5460, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x208000) getdents(r1, &(0x7f0000000080)=""/114, 0x72) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:02 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:20:02 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x13) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x7fff) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/248) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/36) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_newaddr={0x64, 0x14, 0x300, 0x70bd2a, 0x25dfdbfd, {0xa, 0x38, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x280}, @IFA_CACHEINFO={0x14, 0x6, {0x8c0b, 0x9, 0x4, 0x9}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_ADDRESS={0x14, 0x1, @ipv4={[], [], @empty}}, @IFA_FLAGS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4040010) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x1, 0x2, 0x6, 0x1, 0x8001}}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000000c0)={0x4, 0x5, 0x4, 0x1000, {}, {0x3, 0x2, 0x1f, 0xffffffff80000001, 0x7, 0x5, "d9d937fd"}, 0x9, 0x5, @offset=0x1, 0x4}) keyctl$set_reqkey_keyring(0xe, 0x5) r4 = getpid() capset(&(0x7f0000000280)={0x20080522, r4}, &(0x7f0000000300)={0x2, 0x3, 0xfff, 0x2, 0x9ecb, 0x6}) 06:20:02 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x40049409, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:02 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0x4020940d, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0x800000000, 0xd0f, 0x3033}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x800, 0x0) write$apparmor_exec(r1, &(0x7f00000000c0)={'stack ', '/dev/ptmx\x00'}, 0x10) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:03 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x540b, 0x0) 06:20:03 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0045878, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020e00001000000000000000000000000800120000000100000000000000000006000000000000000000000000000000e900000100000000000000000000000000000000000000000000008000000000030006000000000002000080ac14ff9bf00000000000000003000500000000000200423b1d632b91c5200000000000ff"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x216, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20800, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x5, 0x3, 0x2}}, 0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:03 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:20:03 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:03 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:03 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0045878, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:04 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000000004100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xe) 06:20:04 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:04 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0189436, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) 06:20:04 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x540c, 0x0) 06:20:04 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000300)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x7d9e, 0x401001) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0xffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f, 0x1009}}, 0x20) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1410f200000c0f00082dbd7000fbdbdf250c0000030000490039e37172b7499f8a1afdc15c01000000000000001ccd36cbcaf65dc096086289922cb50599e1674cb21cfc713af7bf620443fbafe8ffbac60f0a9c03a547c7ccd74450b557563e6b7900c82f8e5839644330084730ef24326ebf7f0089648bf7aeeaab0029afde000000000000000000"], 0xa25093c2fbaa5674}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = msgget(0x0, 0x100) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000240)) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:04 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0205649, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:04 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:20:05 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:05 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, [@default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) write$binfmt_elf32(r1, 0x0, 0xfffffffffffffd50) 06:20:05 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc020660b, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:05 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285628, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:05 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x44bfc, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) 06:20:05 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0285629, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x540d, 0x0) 06:20:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x800, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=""/102, &(0x7f0000000140)=0x66) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:06 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0585609, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:06 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:20:06 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:06 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc058560f, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = getuid() ioprio_get$uid(0x3, r1) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:06 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0xfffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) signalfd(r0, &(0x7f0000000040)={0x69a}, 0x8) write$binfmt_elf32(r0, 0x0, 0x0) signalfd(r0, &(0x7f0000000080)={0xe73a}, 0x8) 06:20:06 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:06 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc058565d, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5412, 0x0) 06:20:07 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x400) ioctl$KDDISABIO(r0, 0x4b37) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x800, 0x0) write$binfmt_elf32(r1, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8c4, 0x80) 06:20:07 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:07 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d0564b, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:07 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:20:07 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:07 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05667, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x400002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) 06:20:07 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:08 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0x5, 0x4) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5413, 0x0) 06:20:08 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x20100, 0x0) 06:20:08 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:08 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x20000000003, 0x0) 06:20:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:08 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x4, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000040)={0x7, 0x200}) 06:20:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:09 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:09 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x121000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x1, [0x1ff]}}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@empty, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local, @multicast2, @local, @loopback}}}}, &(0x7f0000000080)={0x0, 0x4, [0x80a, 0x28f, 0x425, 0x138]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x10) write$binfmt_elf32(r1, 0x0, 0x0) 06:20:09 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5414, 0x0) 06:20:10 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x6, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:10 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:10 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000100)) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:10 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) 06:20:10 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:10 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:10 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x8, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000040)=""/139, &(0x7f0000000100)=""/192, &(0x7f00000001c0)=""/130, 0x13000}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0xb9, 0x400000) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:10 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5415, 0x0) 06:20:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x80200, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x7ff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80200, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) 06:20:11 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:11 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:11 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:11 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) 06:20:11 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) 06:20:11 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xc, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:12 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xd, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) getsockname(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000100)=0x80) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x410c00) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:12 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5416, 0x0) 06:20:12 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0xe, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:12 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000003, 0x0) 06:20:13 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:13 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:13 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x4b, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:13 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:13 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:13 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) fcntl$setflags(r0, 0x2, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x8f) 06:20:13 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5418, 0x0) 06:20:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) write$binfmt_elf32(r1, 0x0, 0xffffffffffffffe5) 06:20:14 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:14 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:14 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x0, 0x0) 06:20:14 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:14 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:14 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x4240) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) getuid() write$binfmt_elf32(r0, 0x0, 0x0) 06:20:14 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1476.615530][T21766] EXT4-fs warning (device sda1): ext4_group_add:1643: No reserved GDT blocks, can't resize 06:20:14 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1476.788400][T21770] EXT4-fs warning (device sda1): ext4_group_add:1643: No reserved GDT blocks, can't resize 06:20:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x541d, 0x0) 06:20:15 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000100)={0xfffffffffffffff8, 0x3, {0x3, 0x3, 0x0, 0x0, 0x9}}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x80, 0x400000) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0x7, 0x2}, 0x14) 06:20:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:15 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x0, 0x0) 06:20:15 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:15 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000040)={0x6, "f476a8e611f727a55c10ede0906d04c06e0a75b83b6d6701b3d22e15b149b6cb", 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x4, 0xfff, 0x0, 0xe9ae, 0x2, 0x2}) 06:20:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:15 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:16 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x5, 0x1, 0x1ff, 0x7, 0x8}, 0x14) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x9e, 0x1, @scatter={0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/190, 0xbe}]}, &(0x7f0000000480)="005a44955a32ae4519a158d49ca98a47268114bd7244343046c0efbaf0037144f6f9b2a20c24f2306f054cd2b9daa34af2a1017b44d83b01a450132aba3270e237a092b11e54e18a338d635ec3e8c3443fd3269022089d4ff32cc5f2028fa8ce7247b3d90e310fca0a2646982c1ee9b0d0f7b325037e0fcbf6356570f35d75338cb4acd75b9fc2f9023bb750fd36e8584e2ac7d5546437b7b12256997ac4", &(0x7f0000000540)=""/186, 0x8, 0x10, 0x3, &(0x7f0000000600)}) sendto$inet6(r0, &(0x7f0000000180)="440330b80332c45d434d90f27d7dc50ea1d71bb24c65afbc94af04ca425c53e741f21d7011a308f082f78d4f4d091f6c9b428c8d8f99c5063b5df07ffef819c6436b42d76d7ab956eb6fb222ba7a9f621dedfa72d0b4544c3b19f069795c2f37518369e51d89b302a88d7db289c3d83b5e70b3b26160d44f0e1b3e690fa74022ac020c2886a50a725b2e50042c532e02f7a3754777c0cdf4d34bfdd4fcf44764161e8329b6ff34761e4f2b485b916f5b84bf1682a187af1abb9b85456f23165d55d793fa61", 0xc5, 0x4, &(0x7f0000000280)={0xa, 0x4e23, 0x800, @rand_addr="16a946923c94a5008590666b551f8497", 0x7ff}, 0x1c) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/166) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) 06:20:16 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x541e, 0x0) 06:20:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:16 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x40, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x17, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3f, 0x2, 0x11, 0x18, "8c6803b7ab18e0f14b8dd963d0ab605579c9575aba9fb77fc7e95344e3be64343f7bed23a49bd1a699d4647e11104d7301d4822a5b6465f036351ee2631332b1", "41285c3a2e36a669d225bcb8afb60c55a4a40176299139a0a74760d72e8a7824", [0x800, 0x6]}) r3 = geteuid() lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() r10 = getgid() stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x1}, [{0x2, 0x1, r3}, {0x2, 0x4, r4}, {0x2, 0x91b5c0be715abe31, r5}, {0x2, 0x0, r6}, {0x2, 0x4, r7}], {0x4, 0x2}, [{0x8, 0x1, r8}, {0x8, 0x6, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}], {0x10, 0x1}, {0x20, 0x1}}, 0x6c, 0x1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10004000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5b69}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 06:20:16 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32], 0xffffff58) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) splice(r0, 0x0, r5, 0x0, 0x0, 0x0) 06:20:16 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:16 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1478.388566][T21857] Unknown ioctl 19458 06:20:16 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1478.580766][T21870] Unknown ioctl 19458 06:20:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x6}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) 06:20:16 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0xfffffc17) 06:20:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x541f, 0x0) 06:20:17 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:17 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x9, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) 06:20:17 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:17 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:17 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:18 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x800000002) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000003c0)={@mcast1, 0x0}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6gre0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x264, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x248, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x95}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000280)={0x9, 0x4, 0x2, 0xe4b8, 0x4, 0x2, 0x2, 0x0, r8}, &(0x7f0000000300)=0x20) 06:20:18 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xc9a, 0x400000) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x5, 0x1e46, 0x0, 0x7, 0x3, 0x101}, 0x3}, 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x541e, 0x0) 06:20:18 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5421, 0x0) 06:20:19 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) connect$tipc(r1, &(0x7f0000001900)=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x4040000000000f) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000ac0)={0x0, 0xaadf}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80)=@assoc_id=r2, &(0x7f0000000bc0)=0x4) write$binfmt_elf32(r0, 0x0, 0xa9) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000100)={0x8ac, 0x5cb}) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000780)=0x3de0) r5 = add_key$keyring(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000880)='user\x00', &(0x7f00000008c0)={'syz', 0x0}, &(0x7f0000000900)="6680f44bc1d637575f0995365be2a69cd90359357ba991dcb88ace4703caac6d3bd2a111268d3219441082720530d9d0de91dfa1c6a1594e385804bbc496503ba840268bc64af443ef89fd97903b197963572545cb7e6b8691a2f9f3e6ea5788f023a36875c38986093120156702097aca40abde065b238dd80b049b13cd710bfbbe44b7c22c93c5478efa55d668294f6ad96802b367b0ed1f44ab2d86", 0x9d, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000a80)=0x5, 0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000840)='keyring\x00', &(0x7f00000009c0)=@chain={'key_or_keyring:', r6, ':chain\x00'}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000440)={0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000740)={0x190, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12634840030000000000000003000000000000000000000010000000000000000000000000000000000000001000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="f8ffffffffffffff01634040000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000"], @ANYBLOB="01634040030000000000000002000000000000000000000010000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="8561646600000000090000000000000003000000000000000d00000000000000852a687701010000", @ANYRES64=r8, @ANYBLOB="0200000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="10630840000000000000000009631040", @ANYRES64=r9, @ANYBLOB="040000000000000001634040000000000000000003000000000000000000000001000000000000000000000028000000000000000800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000003000000000000002500000000000000"], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00634040030000000000000003000000000000000000000000000000000000000000000038000000000000003000000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="0000000003000000000000008561646600000000050000000000000000000000000000000900000000000000"], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000078000000000000007800000000000000380000000000000038000000000000002000000000000000"], @ANYBLOB="08631040", @ANYRES64=r10, @ANYBLOB="0100000000000000"], 0xdc, 0x0, &(0x7f0000000640)="f6a818dbb658a20ff8bfcdc6be4ba58c440073765011be621e0c01adaa9d5558013eedfb31216155c53694a0b54d30bef1b0b7da61593fd9f731fe02e06b0b0016912849266481989a0c5445200f3af5f93b35bd907ed68dc67803b26a982aa818bacea3f9b0acc82080858592afb05bb8944a52c281f19c898e45d2958b224072d6f88f465f03b9dd84481808463720078ce9c8b48c689c1097c1b0bd6c8385dd845b29a8d1117a7dfa7b1004cf264cbee9ee7285783567ba33cbc97567beeba2d8ab499d3db05ec140fe4751ac63fedc152b5369048f524695c511"}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000a00)=0xc, 0x4) setsockopt$inet_dccp_int(r3, 0x21, 0x5, &(0x7f0000000a40)=0x247, 0x4) 06:20:19 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:19 executing program 0: 06:20:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:19 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0xffe2) 06:20:19 executing program 0: 06:20:19 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:19 executing program 0: 06:20:19 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5423, 0x0) 06:20:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) socketpair(0x3, 0xb, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f00000000c0)=']user\x00'}, 0x30) ptrace$setregset(0x4205, r2, 0x202, &(0x7f0000000240)={&(0x7f0000000140)="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", 0xff}) 06:20:20 executing program 0: 06:20:20 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:20 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:20 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:20 executing program 0: 06:20:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:20 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:20 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:21 executing program 0: 06:20:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5424, 0x0) 06:20:21 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:21 executing program 0: 06:20:21 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:21 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x3001}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000005c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i\x1c\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\fA\xc6t\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x06\x00\x00\x00\x00\x00\x00\x00\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x95\x01\xbe\xe8\x14\x9a\xbf\xa9\xbe\xe5h\x81!\xe4\xc4\x81\xca\x05.\xc8\xed\xdf\x8f\xa5\xbf\xb7\a\xab\xc0\xcd\xc2M\x12v\xfe\xc6\x96)\xc3|/r\xe4V0m\x8b\fV=\x19}\xf7dI\x9e\xcf\x9b\xa1\x9b\xf5\b') write$cgroup_subtree(r0, 0x0, 0xffffffdb) 06:20:22 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) signalfd4(r0, &(0x7f0000000040)={0x3e3b}, 0x8, 0x800) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1f, 0x40) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:22 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:22 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_elf32(r1, 0x0, 0x0) [ 1484.493814][T22159] device nr0 entered promiscuous mode 06:20:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5425, 0x0) 06:20:23 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:23 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x80001) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000001c0)=0x8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) syslog(0x0, &(0x7f0000000040)=""/103, 0x67) 06:20:23 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:23 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000380)=""/167, 0xa7}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 06:20:23 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:23 executing program 0: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 06:20:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:23 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:23 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:23 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1485.732285][T22228] XFS (loop0): Invalid superblock magic number 06:20:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5427, 0x0) 06:20:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xfffffffffffffffe, 0x5, 0x80, 0xf11d, 0x7, 0x6, 0x1e2, 0x0, 0x100, 0x67b, 0x5, 0x6}) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) 06:20:24 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:24 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:24 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:24 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x10) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd, 0x0, 0x5, 0xb3c}}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:20:24 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400100, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x17) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x40) write$binfmt_elf32(r1, 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 06:20:24 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:24 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:25 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xa02, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80, 0x800) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2050}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x16c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x82b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x3ff) 06:20:25 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5428, 0x0) 06:20:26 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:26 executing program 0: syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) close(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xb3c}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x81], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000140)={0x1000, 0x10000}) getsockopt$inet6_buf(r4, 0x29, 0x0, 0x0, &(0x7f0000000100)) 06:20:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:26 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:26 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:26 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x28042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e22, 0x9, @ipv4={[], [], @remote}, 0x9}}}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30) ptrace$setregs(0xd, r2, 0x8001, &(0x7f0000000100)="068fd758e841b4822d8b0d5617065b0d4bde582a5f4f") ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) r3 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000003c0)=""/246) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000180)={0x81, "7bc7ce9b9b41a69f3e55fc400df53f2758d0ddeebd6b0f9cab386d01c1dc6e17", 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:26 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:26 executing program 3: r0 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/132) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000005, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) 06:20:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5441, 0x0) 06:20:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:27 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:27 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\x00\x00\x00\x00`\x00'}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0z\x03\x00\x02\xff', 0x4bfd}) 06:20:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000200)={0x4, "e74bfe1c1f31d7214f03f8157a71a848c0be41c4f81a2b9435542751a698263d", 0x2, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000001c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}, 0x7b, r2}) 06:20:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:27 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:27 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) syz_open_pts(r0, 0x200) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:28 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 1490.447492][T22437] device team0 entered promiscuous mode [ 1490.453085][T22437] device team_slave_0 entered promiscuous mode [ 1490.466945][T22437] device team_slave_1 entered promiscuous mode [ 1490.484491][T22437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1490.852250][T22466] device team0 left promiscuous mode [ 1490.858977][T22466] device team_slave_0 left promiscuous mode [ 1490.865054][T22466] device team_slave_1 left promiscuous mode [ 1490.995884][T22470] device team0 entered promiscuous mode [ 1491.012415][T22470] device team_slave_0 entered promiscuous mode [ 1491.020787][T22470] device team_slave_1 entered promiscuous mode [ 1491.033686][T22470] 8021q: adding VLAN 0 to HW filter on device team0 06:20:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5450, 0x0) 06:20:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000002000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) 06:20:29 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:29 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="00018ecc"], 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 06:20:29 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:29 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:29 executing program 0: socket$unix(0x1, 0x3, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffee8, 0x8000, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000240)={&(0x7f0000000040), 0x7ff}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f00000003c0)) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) sched_yield() syz_open_dev$mice(0x0, 0x0, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) 06:20:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10000, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000040)) 06:20:29 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:29 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffffb, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000100)="0bf90ab95367bfef818151a29783c1fbe00fb447b75f6da5189dd91a53ac77b1f64f2e06c31328c9eda5e04ba37b0bcb045dc132ef84b8e0da1048bda649aa4417d66a6c639ab13c445e6b807e4f143fbdb5261394ca3a4984a8fa07f79f2453c985bc5fa7ca43d4f95004d074a61b182bb8158aa44f663ecee8648d3fdbe7cc6c8699f82d21834d2b9eb74994586cc706fa4f065e4dad6384a08568b1468264de227d18", 0xa4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0xfffffffffffff001, 0x9, 0x5}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0xffffffffffff8001, 0x3, 0x0, 0x0, @sint={0x100000000, 0x3f067a95}}]}) 06:20:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5451, 0x0) 06:20:30 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:30 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000300)="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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0xffffff63) [ 1492.158238][T22528] syz-executor.0 (22528) used greatest stack depth: 21832 bytes left 06:20:30 executing program 0: socket$unix(0x1, 0x3, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffee8, 0x8000, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000240)={&(0x7f0000000040), 0x7ff}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f00000003c0)) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) sched_yield() syz_open_dev$mice(0x0, 0x0, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) 06:20:30 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x3, "0958f94e5a18bf23"}) 06:20:30 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2000000000b) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:31 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:31 executing program 0: socket$unix(0x1, 0x3, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffee8, 0x8000, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000240)={&(0x7f0000000040), 0x7ff}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f00000003c0)) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) sched_yield() syz_open_dev$mice(0x0, 0x0, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@broadcast}}}, &(0x7f0000000b00)=0xe8) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) 06:20:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5452, 0x0) 06:20:31 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x80000000000000c) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:31 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:31 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:31 executing program 0: io_setup(0x9, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000300)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x5}, 0x28, 0x3) 06:20:32 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:32 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x10000000000005, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x73, 0x3ff, 0x4, 0x80000000, 0x6}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000100)="48b6d40abb241db25506165dd810051c0d3d9698b6336fa88f") write$binfmt_elf32(r0, 0x0, 0xffffffffffffff13) 06:20:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x2, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1}}, {0x0, @broadcast}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) io_setup(0x1, &(0x7f0000000300)) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x5}, 0x28, 0x3) 06:20:32 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x545d, 0x0) 06:20:33 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x104) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfffffffffffffc01, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r2, 0x0, 0x0) 06:20:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0xa, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:33 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:33 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:33 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:33 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0xfffffffd}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="455eb091e5fb02a45fcbf9c9c86a32e1286eb3c7ad5269a445341954d4895f2b465c739755737d47f3b1e0736602899f17bf3243d000e303dbb9e58bcd2f3e0be89ddaab8a8b69f73db261e3fe5719ee70dd17d277dd3959c3031659eab8d6efefa19fbc9994b5385cda56bfab0e6db6dfbd"], 0x1}}, 0x44801) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x35, 0x3, 0x0, {0x4, 0x14, 0x0, 'proc&vboxnet0.-em1,,'}}, 0x35) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000293fe4fcffffffffffffff00000000000000000000000000432db7543a714ac81bc68d0dba93ede75753ef45d620d44cf8fd311327139481177f99e0e8a32f681663c6adfe53d08844211565e660d8a3a48284199313a03daa63b297abdee9c62b1b81e12d5831e44da1937fdb00e8f22a04b67e18fbdaf7c3bbeb851401f4b2cdcc3df71c524c3e9db5d0241b83cdde0af34eaa523e671bea91711ff7390590be5728e224933f50e71b250f87fcdb0000000000000000"]) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x307, @broadcast}, 0x4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) io_setup(0x1, &(0x7f0000000300)) prctl$PR_SET_FPEMU(0xa, 0x0) io_submit(0x0, 0x2, &(0x7f0000002a40)=[0x0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0}]) 06:20:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2081, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000340)=0x0) ptrace$getregs(0x4cab484d9b63d8c4, r1, 0x8, &(0x7f0000000080)=""/92) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write$binfmt_elf32(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/93, 0x5d, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x8, 0x200) getsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f0000000180)={@broadcast, @broadcast}, &(0x7f00000001c0)=0x8) 06:20:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x48, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:34 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x44) r2 = accept(r1, &(0x7f0000000200)=@xdp, &(0x7f0000000300)=0xfffffcf3) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:34 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5460, 0x0) 06:20:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x4c, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:34 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) 06:20:34 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x6, &(0x7f0000000100), 0x10) 06:20:34 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:35 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:35 executing program 0: 06:20:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:35 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x66, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:35 executing program 0: 06:20:35 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x40049409, 0x0) 06:20:36 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x444800, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x80000001b) write$binfmt_elf32(r2, 0x0, 0x0) 06:20:36 executing program 0: 06:20:36 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x68, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:36 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:36 executing program 0: 06:20:36 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x424, 0x58, 0x8, 0x7f}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000340)={r1, 0xa5}, 0x8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockname$netlink(r4, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x54) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000480)=0xc) write$binfmt_elf32(r2, 0x0, 0xfffffffffffffee9) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) 06:20:36 executing program 0: 06:20:36 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x400, 0xcb, 0xffffffffffffffc1, 0xfffffffffffffffe, 0x92dc, 0x3, 0x7, 0x9, 0x13a, 0x38, 0x12a, 0x11fa, 0x1, 0x20, 0x1, 0xc162, 0x0, 0x3}, [{0x60000006, 0xfffffffffffffff8, 0x3, 0x2, 0x1, 0x1, 0x7}, {0x0, 0x40, 0x6000, 0x100, 0xffffffffffffffc1, 0x2, 0x1, 0x40}], "b3cc486d2f3cb94e81067880a840467e2d7046e98422b2995dca5d941108c46f1c0fb00730eaee1a3fa52afdfff626249d538e7e9822d082dccdfeed6096a6b2cd7263ed73dc5ace562657c7a528246e669a56ff119776c0a43195d5347f0635af11eac5ec7646493083b4ede333502cbb0a3da345c8921613684fbf3ce0bce5083bf2c65b4dffd6cf1f04583a71fb82d47951b653017aee0b0cbc07babcc17dddc68a500f4a61b8329532e97069901d2a461826a0527600f9a4d6ef986e4f024e72e10f64d8590f2bc85304593c3be203e152bade8039a0ec2f35f948f8f6d476ac182d12c89a9c47bf5b1b15cbc8df1ec93ad4847660", [[], [], [], [], [], [], [], []]}, 0x96f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:36 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x4020940d, 0x0) 06:20:37 executing program 0: 06:20:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x6c, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:37 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x200000, 0x0) connect$x25(r1, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x80) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x5, 0x8687, 0x7, 0x7ff, 0x2, 0x800, 0x235, 0x1ff, 0x69bce396, 0x3, 0x7fffffff, 0x8, 0xb64, 0xff, 0xd4, 0x2], 0x106000, 0x80000}) 06:20:37 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:37 executing program 0: 06:20:37 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x74, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:37 executing program 0: 06:20:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x4) 06:20:37 executing program 0: 06:20:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x80045432, 0x0) 06:20:38 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10000000000001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xb) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x2, 0x101, 0x1643}) write$binfmt_elf32(r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 06:20:38 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x7a, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:38 executing program 0: 06:20:38 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:38 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:38 executing program 0: 06:20:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x10100) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r2, 0x99, 'o`}', "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"}}, 0x1e0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:38 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:38 executing program 0: 06:20:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x1ae, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x80045440, 0x0) 06:20:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0xf3) 06:20:39 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:39 executing program 0: 06:20:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x33f, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:39 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:39 executing program 0: 06:20:39 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x6, 0x8, 0x100000000, 0xffff, 0x13, 0x1, 0xde4, 0x3, 0x5, 0x8, 0x4, 0x8}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x378, 0x180) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000140)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8) getpeername(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000280)=0x80) bind$xdp(r1, &(0x7f0000000380)={0x2c, 0x2, r2, 0x3d, r3}, 0x10) write$binfmt_elf32(r0, 0x0, 0xffffffffffffff78) sendfile(r1, r0, &(0x7f0000000080)=0xa, 0x6) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x8000) 06:20:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x830}, 0x0) 06:20:40 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0xa00, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:40 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0xc0045878, 0x0) 06:20:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) 06:20:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x365) r1 = socket$key(0xf, 0x3, 0x2) listen(r1, 0x8) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x8000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="200026bd7000ffdbdf250b41d328d700000008000600"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 06:20:41 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:41 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x2000, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:41 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f0000002740)=@xdp={0x2c, 0x4}, 0x80, 0x0}, 0x2}], 0x1, 0x4044000) close(r0) socket$netlink(0x10, 0x3, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000ffffffff) 06:20:41 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x5c2, 0x1, "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", 0xfd, 0x6, 0x18000000000000, 0x8, 0x5, 0xa9, 0x0, 0x1}, r2}}, 0x120) 06:20:41 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x3f03, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:41 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x240000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0xc0045878, 0x0) 06:20:42 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x4000, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:42 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xa0, 0x408040) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x8}, 0x28, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) 06:20:42 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x444800, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x80000001b) write$binfmt_elf32(r2, 0x0, 0x0) 06:20:42 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:42 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x28000, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000080)={0x3}) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000100)) 06:20:42 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x4800, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) getpid() 06:20:42 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:42 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x2, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0xc0189436, 0x0) 06:20:43 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 06:20:43 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x4c00, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:43 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:43 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:43 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000040)="0e736cd29c622fd806ac1358d41a8ea0e1c8b8828ba4a08055fec8") write$binfmt_elf32(r0, 0x0, 0x0) 06:20:44 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) write$binfmt_elf32(r0, 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000280)) r1 = semget(0x1, 0x0, 0x7) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xefa, 0x1a1001) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x7ef, 0x16, 0x5da, 0x3, "82f2ae359f2b2d2efd6ade60052fd4830bd30fcf26a87ae007f370f2a533a494"}) semctl$GETNCNT(r1, 0x6, 0xe, &(0x7f0000000080)=""/51) 06:20:44 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x6600, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x6800, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0xc020660b, 0x0) 06:20:44 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x101000) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x5, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000000c0)) write$binfmt_elf32(r1, 0x0, 0x11) 06:20:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:44 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:44 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:45 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0xfffffffffffffdd2) 06:20:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x6c00, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:45 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x540d, 0x0) 06:20:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x7400, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x1000, 0x1, 0x6, 0xc, 0x100000000ac}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x80000) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, 0x0, 0x4, 0x416}, 0xa) 06:20:46 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) write$binfmt_elf32(r0, 0x0, 0x0) 06:20:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x7a00, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:46 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:20:46 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x6c00, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:47 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='/dev/ptmx\x00', 0xa, 0x2) 06:20:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0xae01, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:20:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) clone(0x10000, &(0x7f0000000280)="b2b6827bf1fcda98986f246d53e9c967dad52db02b8fe54d", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="150ecf41ae7e59954e9c7343bb288abc33e6fbfa8bae6c38393d14197ba44840828d5acd2347618acf63b2067e6128e953c408d4fd") write$binfmt_elf32(r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x400, @local, 0x6}}, [0x7fff, 0x9, 0x6, 0x1, 0x0, 0xd4, 0x3, 0x9, 0x1, 0x2, 0x7, 0x8d, 0x40, 0x4687]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x1, @loopback, 0x389}}, 0x9, 0x9, 0x4, 0x0, 0x81}, 0x98) 06:20:47 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:20:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x67665, 0x279d, 0x0, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) [ 1618.665149][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1618.672079][ C0] rcu: 0-....: (10589 ticks this GP) idle=172/1/0x4000000000000002 softirq=138774/138776 fqs=5248 [ 1618.683460][ C0] rcu: (t=10500 jiffies g=205193 q=558) [ 1618.689177][ C0] NMI backtrace for cpu 0 [ 1618.693490][ C0] CPU: 0 PID: 23412 Comm: syz-executor.0 Not tainted 5.1.0-rc1-next-20190322 #9 [ 1618.702486][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.712527][ C0] Call Trace: [ 1618.715797][ C0] [ 1618.718639][ C0] dump_stack+0x172/0x1f0 [ 1618.722973][ C0] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1618.728216][ C0] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 1618.733840][ C0] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 1618.739811][ C0] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1618.745691][ C0] rcu_dump_cpu_stacks+0x183/0x1cf [ 1618.750784][ C0] ? find_next_bit+0x107/0x130 [ 1618.755571][ C0] rcu_sched_clock_irq.cold+0x500/0xa4a [ 1618.761180][ C0] ? raise_softirq+0x11f/0x310 [ 1618.765952][ C0] update_process_times+0x32/0x80 [ 1618.771026][ C0] tick_sched_handle+0xa2/0x190 [ 1618.775880][ C0] tick_sched_timer+0x47/0x130 [ 1618.780627][ C0] __hrtimer_run_queues+0x33e/0xde0 [ 1618.785809][ C0] ? tick_sched_do_timer+0x1b0/0x1b0 [ 1618.791076][ C0] ? hrtimer_start_range_ns+0xc80/0xc80 [ 1618.796602][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1618.802311][ C0] ? ktime_get_update_offsets_now+0x2d9/0x440 [ 1618.808466][ C0] hrtimer_interrupt+0x314/0x770 [ 1618.813398][ C0] smp_apic_timer_interrupt+0x120/0x570 [ 1618.818930][ C0] apic_timer_interrupt+0xf/0x20 [ 1618.823860][ C0] [ 1618.826784][ C0] RIP: 0010:kernel_poison_pages+0x0/0x2b0 [ 1618.832515][ C0] Code: 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 e8 67 8e c8 ff 0f b6 05 24 87 b6 07 5d c3 0f 1f 40 00 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 41 57 41 56 41 55 49 89 fd 41 54 41 89 f4 53 89 d3 48 [ 1618.852130][ C0] RSP: 0018:ffff8880869a7898 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1618.860550][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1618.868507][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffea0007b85500 [ 1618.876464][ C0] RBP: ffff8880869a78c8 R08: ffff8880598c02c0 R09: ffff8880598c0b88 [ 1618.884508][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: ffffea0007b85500 [ 1618.892472][ C0] R13: 00000000001ee154 R14: ffff8881ee154000 R15: 0000000000000000 [ 1618.900489][ C0] ? free_unref_page+0x200/0x600 [ 1618.905412][ C0] __free_pages+0x72/0xb0 [ 1618.909732][ C0] relay_destroy_buf+0x12d/0x360 [ 1618.914649][ C0] relay_open_buf.part.0+0x839/0xb60 [ 1618.919919][ C0] relay_open+0x523/0x980 [ 1618.924242][ C0] do_blk_trace_setup+0x414/0xb90 [ 1618.929249][ C0] __blk_trace_setup+0xe3/0x190 [ 1618.934078][ C0] ? do_blk_trace_setup+0xb90/0xb90 [ 1618.939282][ C0] blk_trace_setup+0x4f/0x70 [ 1618.943871][ C0] sg_ioctl+0x369/0x2a10 [ 1618.948098][ C0] ? sg_new_write.isra.0+0xa70/0xa70 [ 1618.953364][ C0] ? __might_fault+0x12b/0x1e0 [ 1618.958114][ C0] ? sg_new_write.isra.0+0xa70/0xa70 [ 1618.963378][ C0] do_vfs_ioctl+0xd6e/0x1390 [ 1618.967951][ C0] ? ioctl_preallocate+0x210/0x210 [ 1618.973051][ C0] ? kasan_check_read+0x11/0x20 [ 1618.977883][ C0] ? _copy_to_user+0xc9/0x120 [ 1618.982549][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1618.988775][ C0] ? put_timespec64+0xda/0x140 [ 1618.993527][ C0] ? nsecs_to_jiffies+0x30/0x30 [ 1618.998364][ C0] ? tomoyo_file_ioctl+0x23/0x30 [ 1619.010684][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1619.016914][ C0] ? security_file_ioctl+0x93/0xc0 [ 1619.022006][ C0] ksys_ioctl+0xab/0xd0 [ 1619.026144][ C0] __x64_sys_ioctl+0x73/0xb0 [ 1619.030719][ C0] do_syscall_64+0x103/0x610 [ 1619.035296][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1619.041167][ C0] RIP: 0033:0x458209 [ 1619.045050][ C0] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1619.064654][ C0] RSP: 002b:00007f502e27ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1619.073057][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 1619.081114][ C0] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 000000000000000e [ 1619.089083][ C0] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1619.097157][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f502e27b6d4 [ 1619.105126][ C0] R13: 00000000004bf611 R14: 00000000004d1090 R15: 00000000ffffffff 06:22:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x20000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x61a800, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x80000000, 0x0, 0x6, 0x1, 0x0, 0x81, 0x800, 0xa, 0x0, 0xfffffffffffffffb, 0x3, 0x7ff, 0x7, 0x8, 0x7, 0x8000, 0x4, 0x400, 0x6cf90676, 0x5, 0x5, 0x8000, 0xd3, 0x6, 0x4d15, 0x7, 0x8000, 0xffff, 0x1c, 0x10001, 0xfffffffffffffffd, 0x1000, 0x4, 0x5, 0xfffffffffffff508, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x5047, 0x3}, 0x20000, 0xffffffffffffffff, 0x45d, 0x9, 0x4, 0x7, 0x2}, r2, 0x8, r3, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TIOCLINUX3(r0, 0x5437, 0x0) 06:22:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x1000000, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:22:46 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:22:46 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0x3, 0x400000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000500)={0x7, {{0xa, 0x4e22, 0x20, @loopback, 0x1}}, {{0xa, 0x4e22, 0x7, @empty, 0x4}}}, 0x108) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000180)) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = msgget$private(0x0, 0x200) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getpeername$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) accept$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000900)={'vcan0\x00', 0x0}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000a00)={@remote, @remote, 0x0}, &(0x7f0000000a40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000f80)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001080)=0xe8) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x64b82, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000010c0)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000001100)=0x14) recvmsg(r2, &(0x7f0000001340)={&(0x7f0000001140)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001300)=[{&(0x7f00000011c0)=""/195, 0xc3}, {&(0x7f00000012c0)=""/29, 0x1d}], 0x2}, 0x40) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000015c0)={&(0x7f0000001380)={0x21c, r5, 0xf05, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x140, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x91}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x4810}, 0x20000041) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x40000, 0x0) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000000c0)=""/143) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.nlink\x00', &(0x7f0000000400)={'U+', 0x1}, 0x28, 0x1) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x400) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r1, 0x0, 0x0) 06:22:46 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast2, @loopback, 0x1, 0x1, [@multicast1]}, 0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\xfc\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) 06:22:46 executing program 0: 06:22:46 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:22:46 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:22:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000001580)='/dev/dsp#\x00', 0x100000002, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x2020, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x400, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) fcntl$setlease(r1, 0x400, 0x1) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000680)=0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) unshare(0x20400) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='mime_typecpuset\x00', 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000180)={0x7ffa, 0x0, 0x0, 0xffffffffffffffff}) r7 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000400)="742da9d5d1e6e3fb86f00d75767f421ea55007491dbf4b869b583e6f2997e5f0be73714ae3a9120c328f4d3e7d543405cbab4fca06cd53c4d70fdc1d5c8c04f218", 0x41, 0xfffffffffffffffa) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) sched_setattr(r4, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x5161, 0x7b2, 0x4, 0x8, 0xf51}, 0x0) keyctl$describe(0x6, r7, &(0x7f0000000480)=""/249, 0xf9) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000003c0)=0x7) pipe2(&(0x7f0000000340), 0x0) clock_gettime(0x4, &(0x7f00000001c0)) r8 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x7d) ioctl$BLKTRACESTART(r8, 0x1274, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000580)=""/134) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d, 0x2000000, 0x0, r4}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 06:22:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x6, 0x0, 0x1, 0x0, 0x100000000, 0x400, 0x100000001}, 0xc) write$binfmt_elf32(r0, 0x0, 0x0) 06:22:46 executing program 5: r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 06:22:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x10000000000002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) write$binfmt_elf32(r0, 0x0, 0x0)